Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-110919 | high | 8.8 | No | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-19 |
| CVE-2026-110920 | high | 8.8 | No | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a... | 2026-10-19 |
| CVE-2026-110921 | high | 8.8 | No | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr... | 2026-10-19 |
| CVE-2026-110922 | high | 8.8 | No | Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox v... | 2026-10-19 |
| CVE-2026-70012 | high | 7.5 | No | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-83934 | high | 8.8 | No | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-83935 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. | 2026-10-19 |
| CVE-2026-93483 | not reported | — | No | In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions... | 2026-10-19 |
| CVE-2026-95125 | medium | 6.5 | No | libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated... | 2026-10-19 |
| CVE-2026-75353 | high | 7.5 | No | OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a... | 2026-10-19 |
| CVE-2026-78796 | critical | 9.8 | No | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to... | 2026-10-19 |
| CVE-2026-50218 | high | 8.5 | No | Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a... | 2026-10-19 |
| CVE-2026-42616 | high | 7.8 | No | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfsca... | 2026-10-19 |
| CVE-2026-23112 | critical | 9.8 | No | In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_bu... | 2026-10-19 |
| CVE-2026-112269 | medium | 6.5 | No | SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ... | 2026-10-19 |
| CVE-2026-112190 | medium | 5.3 | No | A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer... | 2026-10-19 |
| CVE-2026-112199 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Wishlist yith-wo... | 2026-10-19 |
| CVE-2026-112142 | high | 7.3 | No | A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vuln... | 2026-10-19 |
| CVE-2026-112138 | medium | 4.7 | No | A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dm... | 2026-10-19 |
| CVE-2026-112105 | low | 3.7 | No | A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpOverrides in the library lib/ma... | 2026-10-19 |