Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-111044 | high | 7.6 | No | Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certifica... | 2026-10-28 |
| CVE-2021-48020 | medium | 6.5 | No | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function c... | 2026-10-28 |
| CVE-2020-37289 | low | 3.7 | No | Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to be stored in uint256... | 2026-10-28 |
| CVE-2016-20103 | high | 7.5 | No | Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary... | 2026-10-28 |
| CVE-2026-98114 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parse_dacl() silently accepts tru... | 2026-10-28 |
| CVE-2026-98116 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF... | 2026-10-28 |
| CVE-2026-105733 | high | 8.8 | No | Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. | 2026-10-28 |
| CVE-2026-98117 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, trace_cachefile... | 2026-10-28 |
| CVE-2026-98118 | high | 7.1 | No | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by loading all folios upfro... | 2026-10-28 |
| CVE-2026-116173 | high | 7.5 | No | vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore by bypassing... | 2026-10-28 |
| CVE-2026-116175 | medium | 6.5 | No | vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls load_audio without... | 2026-10-28 |
| CVE-2026-116178 | high | 7.5 | No | vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending incons... | 2026-10-28 |
| CVE-2026-116179 | high | 7.5 | No | vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap... | 2026-10-28 |
| CVE-2026-116180 | high | 7.7 | No | vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int... | 2026-10-28 |
| CVE-2026-116187 | medium | 5.0 | No | Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows authenticated tenants... | 2026-10-28 |
| CVE-2026-84496 | medium | 6.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2.... | 2026-10-28 |
| CVE-2026-115912 | high | 8.8 | No | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory a... | 2026-10-28 |
| CVE-2026-115915 | critical | 9.8 | No | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to P... | 2026-10-28 |
| CVE-2026-65327 | high | 8.4 | No | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A... | 2026-10-28 |
| CVE-2026-96521 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-28 |