Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-97800 | high | 7.8 | No | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locall... | 2026-10-16 |
| CVE-2026-97803 | high | 7.8 | No | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-97810 | high | 7.0 | No | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges... | 2026-10-16 |
| CVE-2026-96934 | critical | 9.8 | No | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | 2026-10-16 |
| CVE-2026-97312 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-16 |
| CVE-2026-105896 | medium | 5.5 | No | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker... | 2026-10-16 |
| CVE-2026-104348 | high | 7.8 | No | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of... | 2026-10-16 |
| CVE-2026-104347 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-16 |
| CVE-2026-104346 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-16 |
| CVE-2026-100112 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-16 |
| CVE-2026-100111 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-16 |
| CVE-2026-96522 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-16 |
| CVE-2026-96523 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-10-16 |
| CVE-2026-89603 | not reported | — | No | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-16 |
| CVE-2026-111092 | medium | 6.5 | No | In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project... | 2026-10-16 |
| CVE-2026-107795 | not reported | — | No | Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an... | 2026-10-16 |
| CVE-2026-101311 | high | 7.0 | No | The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sy... | 2026-10-16 |
| CVE-2026-101310 | high | 7.0 | No | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry ca... | 2026-10-16 |
| CVE-2026-101309 | high | 7.0 | No | The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on... | 2026-10-16 |
| CVE-2026-0315 | not reported | — | No | A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to... | 2026-10-16 |

