Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2026-97800 high 7.8 No Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locall... 2026-10-16
CVE-2026-97803 high 7.8 No Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. 2026-10-16
CVE-2026-97810 high 7.0 No Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges... 2026-10-16
CVE-2026-96934 critical 9.8 No Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. 2026-10-16
CVE-2026-97312 high 7.8 No Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... 2026-10-16
CVE-2026-105896 medium 5.5 No Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker... 2026-10-16
CVE-2026-104348 high 7.8 No Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of... 2026-10-16
CVE-2026-104347 high 7.8 No Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... 2026-10-16
CVE-2026-104346 high 7.8 No Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... 2026-10-16
CVE-2026-100112 high 7.8 No Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... 2026-10-16
CVE-2026-100111 high 7.8 No Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... 2026-10-16
CVE-2026-96522 high 7.8 No Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... 2026-10-16
CVE-2026-96523 high 7.8 No Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... 2026-10-16
CVE-2026-89603 not reported — No Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. 2026-10-16
CVE-2026-111092 medium 6.5 No In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project... 2026-10-16
CVE-2026-107795 not reported — No Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an... 2026-10-16
CVE-2026-101311 high 7.0 No The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sy... 2026-10-16
CVE-2026-101310 high 7.0 No The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry ca... 2026-10-16
CVE-2026-101309 high 7.0 No The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on... 2026-10-16
CVE-2026-0315 not reported — No A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to... 2026-10-16