Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83796 | high | 7.8 | No | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83797 | high | 8.8 | No | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. | 2026-10-27 |
| CVE-2026-83798 | medium | 5.5 | No | Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. | 2026-10-27 |
| CVE-2026-106433 | high | 8.8 | No | Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a... | 2026-10-27 |
| CVE-2026-87306 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that... | 2026-10-27 |
| CVE-2026-87305 | high | 8.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-10-27 |
| CVE-2026-87303 | medium | 5.9 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-27 |
| CVE-2026-87301 | high | 8.4 | No | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.... | 2026-10-27 |
| CVE-2026-87290 | medium | 5.9 | No | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).... | 2026-10-27 |
| CVE-2026-83826 | high | 7.8 | No | Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83827 | high | 7.0 | No | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83828 | high | 7.8 | No | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83829 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83830 | high | 7.8 | No | Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83832 | high | 7.8 | No | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83833 | high | 7.8 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-106117 | high | 7.5 | No | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can p... | 2026-10-27 |
| CVE-2026-83834 | high | 7.0 | No | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. | 2026-10-27 |
| CVE-2026-83835 | medium | 5.5 | No | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. | 2026-10-27 |
| CVE-2026-83836 | high | 7.8 | No | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. | 2026-10-27 |