Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112937 | medium | 6.1 | No | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock-* private-h... | 2026-10-21 |
| CVE-2026-112939 | medium | 4.7 | No | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can trust a forged process identifier in a ma... | 2026-10-21 |
| CVE-2026-97783 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized a... | 2026-10-21 |
| CVE-2024-45778 | medium | 5.5 | No | A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to... | 2026-10-21 |
| CVE-2024-45779 | medium | 6.0 | No | An integer overflow flaw was found in the BFS file system driver in grub2. When reading a file with an indirect extent map, grub2 fails to v... | 2026-10-21 |
| CVE-2026-83867 | high | 7.8 | No | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-83870 | medium | 5.5 | No | Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. | 2026-10-21 |
| CVE-2026-83871 | high | 7.0 | No | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-83872 | high | 7.8 | No | Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-113271 | high | 8.8 | No | Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandb... | 2026-10-21 |
| CVE-2026-83873 | high | 7.8 | No | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-83874 | high | 8.8 | No | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. | 2026-10-21 |
| CVE-2026-113338 | high | 8.8 | No | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox vi... | 2026-10-21 |
| CVE-2026-83876 | high | 7.8 | No | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. | 2026-10-21 |
| CVE-2026-9825 | low | 3.7 | No | IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections... | 2026-10-21 |
| CVE-2026-93442 | high | 8.2 | No | IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a... | 2026-10-21 |
| CVE-2026-87800 | medium | 6.8 | No | IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a fi... | 2026-10-21 |
| CVE-2026-114245 | high | 7.3 | No | A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a49... | 2026-10-21 |
| CVE-2026-114105 | medium | 6.2 | No | Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attackers to set setuid, setgid, or sticky bits o... | 2026-10-21 |
| CVE-2026-114095 | medium | 6.5 | No | Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause infinite recursion via... | 2026-10-21 |