Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-96854 | medium | 5.5 | No | Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclos... | 2026-10-20 |
| CVE-2026-96855 | medium | 5.5 | No | Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 2026-10-20 |
| CVE-2026-96856 | high | 7.8 | No | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | 2026-10-20 |
| CVE-2026-96857 | medium | 5.5 | No | Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information l... | 2026-10-20 |
| CVE-2026-101307 | critical | 9.1 | No | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap t... | 2026-10-20 |
| CVE-2026-101306 | critical | 9.8 | No | SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restrict... | 2026-10-20 |
| CVE-2026-101305 | high | 8.8 | No | renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricte... | 2026-10-20 |
| CVE-2026-87766 | high | 8.8 | No | A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the... | 2026-10-20 |
| CVE-2026-101303 | high | 7.5 | No | The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's prima... | 2026-10-20 |
| CVE-2026-101302 | medium | 6.5 | No | TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code whic... | 2026-10-20 |
| CVE-2026-83966 | high | 7.8 | No | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of th... | 2026-10-20 |
| CVE-2026-83965 | high | 7.8 | No | Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the contex... | 2026-10-20 |
| CVE-2026-105899 | critical | 10.0 | No | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in... | 2026-10-20 |
| CVE-2026-105898 | high | 8.2 | No | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curre... | 2026-10-20 |
| CVE-2026-103843 | high | 7.8 | No | Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curre... | 2026-10-20 |
| CVE-2026-103842 | high | 7.8 | No | Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the e... | 2026-10-20 |
| CVE-2026-103841 | high | 7.8 | No | Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the e... | 2026-10-20 |
| CVE-2026-103840 | high | 7.8 | No | Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the e... | 2026-10-20 |
| CVE-2026-82166 | high | 8.8 | No | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticate... | 2026-10-19 |
| CVE-2026-99999 | critical | 9.3 | No | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet w... | 2026-10-19 |