Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112915 | medium | 5.5 | No | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database with... | 2026-10-21 |
| CVE-2026-98149 | high | 7.8 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU IDs Per-CPU array,... | 2026-10-21 |
| CVE-2026-98150 | high | 7.0 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs BPF_F_CPU stores the... | 2026-10-21 |
| CVE-2026-98151 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Ta... | 2026-10-21 |
| CVE-2026-95168 | high | 7.8 | No | An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and... | 2026-10-21 |
| CVE-2026-94416 | medium | 6.8 | No | An authorization bypass was found in the Ansible Automation Platform (AAP) gateway. The gateway API allows an authenticated administrator to... | 2026-10-21 |
| CVE-2026-98153 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info()... | 2026-10-21 |
| CVE-2026-102214 | high | 8.8 | No | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. | 2026-10-21 |
| CVE-2026-102215 | high | 7.8 | No | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges lo... | 2026-10-21 |
| CVE-2026-102216 | high | 7.8 | No | Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privil... | 2026-10-21 |
| CVE-2026-102217 | high | 8.8 | No | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. | 2026-10-21 |
| CVE-2026-113045 | medium | 6.5 | No | Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory ins... | 2026-10-21 |
| CVE-2026-113043 | high | 8.8 | No | Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sa... | 2026-10-21 |
| CVE-2026-70284 | medium | 5.5 | No | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-70285 | high | 7.8 | No | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-70288 | medium | 5.5 | No | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information lo... | 2026-10-21 |
| CVE-2026-70292 | medium | 5.5 | No | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-70293 | medium | 5.5 | No | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-70294 | medium | 5.5 | No | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-101667 | medium | 5.4 | No | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected... | 2026-10-21 |