Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-91457 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-04 |
| CVE-2026-91458 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-91483 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version th... | 2026-11-04 |
| CVE-2026-75883 | medium | 6.8 | No | A flaw was found in pppd. A remote attacker could exploit a buffer overflow vulnerability in the PEAP response handling. By sending a specia... | 2026-11-04 |
| CVE-2026-14330 | medium | 5.5 | No | Multiple unbounded alloca() calls in the PulseAudio protocol server. | 2026-11-04 |
| CVE-2026-14324 | medium | 6.5 | No | RAOP module accepts unbounded Content-Length values and does not check the pw_array_add() return. | 2026-11-04 |
| CVE-2026-113941 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113940 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113936 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-112698 | medium | 5.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS... | 2026-11-04 |
| CVE-2026-112653 | medium | 4.3 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-04 |
| CVE-2026-112652 | medium | 5.5 | No | A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, m... | 2026-11-04 |
| CVE-2026-112521 | critical | 9.3 | No | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Ta... | 2026-11-04 |
| CVE-2026-112467 | low | 3.3 | No | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may be able to bypa... | 2026-11-04 |
| CVE-2026-107479 | not reported | — | No | An integer truncation vulnerability in the QTextCodec conversion functions of the Qt 5 Core Compatibility APIs module impacts the Qt Framewo... | 2026-11-04 |
| CVE-2026-112421 | medium | 4.7 | No | A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2... | 2026-11-04 |
| CVE-2026-102713 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with packet chaining, the TFTP server does not bound the length... | 2026-11-04 |
| CVE-2026-119977 | high | 8.1 | Listed | WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging path... | 2026-11-04 |
| CVE-2026-121565 | high | 7.4 | No | Tanium addressed an improper certificate validation vulnerability in multiple products. Products have been updated to distrust several inter... | 2026-11-04 |
| CVE-2026-119551 | medium | 6.5 | No | Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions that allows authenticated non-a... | 2026-11-04 |