Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-116044 | medium | 6.3 | No | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of... | 2026-10-29 |
| CVE-2026-108494 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions. | 2026-10-29 |
| CVE-2026-107042 | high | 7.5 | No | Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or overwrite files in a... | 2026-10-29 |
| CVE-2026-107015 | critical | 9.1 | No | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note dat... | 2026-10-29 |
| CVE-2026-110076 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-29 |
| CVE-2026-110077 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-10-29 |
| CVE-2026-96108 | high | 7.8 | No | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-95943 | high | 7.0 | No | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83760 | medium | 5.5 | No | Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-96206 | medium | 5.5 | No | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83741 | high | 7.8 | No | Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83740 | high | 7.0 | No | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83739 | high | 7.5 | No | Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. | 2026-10-29 |
| CVE-2026-83738 | high | 7.0 | No | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83725 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. | 2026-10-29 |
| CVE-2026-83737 | medium | 5.5 | No | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83513 | high | 7.8 | No | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83736 | medium | 5.5 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83514 | high | 7.8 | No | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83735 | high | 7.8 | No | Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-29 |