Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-95308 | low | 3.4 | No | Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to po... | 2026-11-03 |
| CVE-2026-95293 | medium | 4.7 | No | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a cra... | 2026-11-03 |
| CVE-2026-84604 | high | 7.8 | No | A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2,... | 2026-11-03 |
| CVE-2026-82393 | high | 7.5 | No | pnpm is a package manager. Prior to 10.34.5 and 11.11.0, pnpm accepts a scoped path traversal in a tarball dependency's package.json manifes... | 2026-11-03 |
| CVE-2026-82160 | low | 3.3 | No | Dell Wyse Management Suite, versions prior to 2609.0.0.155, contain an Improper Neutralization of Input During Web Page Generation ('Cross-s... | 2026-11-03 |
| CVE-2026-82154 | low | 2.4 | No | Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker wit... | 2026-11-03 |
| CVE-2026-84595 | medium | 5.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27,... | 2026-11-03 |
| CVE-2026-84389 | low | 3.1 | No | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2... | 2026-11-03 |
| CVE-2026-84385 | medium | 5.4 | No | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7... | 2026-11-03 |
| CVE-2026-7769 | high | 8.1 | No | IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gatewa... | 2026-11-03 |
| CVE-2026-7363 | high | 8.8 | No | Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code ins... | 2026-11-03 |
| CVE-2026-81623 | high | 8.8 | No | IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due... | 2026-11-03 |
| CVE-2026-81049 | medium | 6.7 | No | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with... | 2026-11-03 |
| CVE-2026-79986 | critical | 9.1 | No | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This is... | 2026-11-03 |
| CVE-2026-79633 | high | 8.1 | No | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users... | 2026-11-03 |
| CVE-2026-79624 | critical | 9.8 | No | Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session inva... | 2026-11-03 |
| CVE-2026-79620 | medium | 4.3 | No | Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An... | 2026-11-03 |
| CVE-2026-79613 | medium | 5.3 | No | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associate... | 2026-11-03 |
| CVE-2026-74985 | critical | 9.8 | No | Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154,... | 2026-11-03 |
| CVE-2026-76994 | high | 7.5 | No | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2.... | 2026-11-03 |