Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110260 | medium | 5.5 | No | OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames(... | 2026-10-20 |
| CVE-2024-58392 | low | 3.3 | No | PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buf... | 2026-10-20 |
| CVE-2026-88160 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an... | 2026-10-20 |
| CVE-2026-88161 | high | 7.0 | No | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-88162 | medium | 5.5 | No | Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. | 2026-10-20 |
| CVE-2026-88165 | high | 8.8 | No | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. | 2026-10-20 |
| CVE-2026-88168 | high | 7.8 | No | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-88171 | high | 8.1 | No | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 2026-10-20 |
| CVE-2026-88173 | high | 8.1 | No | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. | 2026-10-20 |
| CVE-2026-88174 | high | 8.1 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unautho... | 2026-10-20 |
| CVE-2026-88177 | high | 7.8 | No | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-88179 | high | 7.8 | No | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-88180 | high | 7.8 | No | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-88181 | high | 7.8 | No | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-88193 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-88219 | high | 8.8 | No | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. | 2026-10-20 |
| CVE-2026-96246 | high | 7.5 | No | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. | 2026-10-20 |
| CVE-2026-96252 | critical | 9.1 | No | Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform... | 2026-10-20 |
| CVE-2026-96300 | medium | 5.9 | No | Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. | 2026-10-20 |
| CVE-2026-96853 | medium | 4.7 | No | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information lo... | 2026-10-20 |