Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87765 | medium | 5.5 | No | In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of... | 2026-10-16 |
| CVE-2026-66086 | critical | 9.8 | No | In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 message... | 2026-10-16 |
| CVE-2026-66085 | medium | 5.5 | No | In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local inf... | 2026-10-16 |
| CVE-2026-85822 | high | 7.8 | No | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85823 | high | 7.0 | No | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85824 | high | 7.0 | No | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85825 | high | 7.0 | No | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85826 | high | 7.0 | No | Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85805 | medium | 6.5 | No | Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a... | 2026-10-16 |
| CVE-2026-85806 | critical | 9.8 | No | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-85807 | high | 7.8 | No | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85808 | high | 7.5 | No | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. | 2026-10-16 |
| CVE-2026-85809 | critical | 9.8 | No | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine | 2026-10-16 |
| CVE-2026-96920 | high | 7.8 | No | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-85810 | high | 7.0 | No | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96921 | medium | 5.5 | No | Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disc... | 2026-10-16 |
| CVE-2026-96923 | high | 7.0 | No | Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-96924 | critical | 9.8 | No | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-85811 | high | 7.5 | No | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. | 2026-10-16 |
| CVE-2026-96925 | medium | 5.5 | No | Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. | 2026-10-16 |