Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-85333 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authori... | 2026-10-16 |
| CVE-2026-111105 | high | 7.0 | No | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod... | 2026-10-16 |
| CVE-2026-110872 | medium | 5.9 | No | Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTP... | 2026-10-16 |
| CVE-2026-110869 | high | 7.5 | No | Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detectio... | 2026-10-16 |
| CVE-2026-110867 | high | 8.5 | No | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placi... | 2026-10-16 |
| CVE-2026-110859 | high | 7.5 | No | GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to read arbitrary files... | 2026-10-16 |
| CVE-2026-110855 | medium | 6.5 | No | GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables v... | 2026-10-16 |
| CVE-2026-110854 | not reported | — | No | Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails... | 2026-10-16 |
| CVE-2026-109595 | medium | 5.5 | No | Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the... | 2026-10-16 |
| CVE-2026-109425 | medium | 5.3 | No | Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() and ReadWithNoS... | 2026-10-16 |
| CVE-2026-85331 | medium | 6.5 | No | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. | 2026-10-16 |
| CVE-2026-69918 | high | 7.8 | No | Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-75600 | high | 8.8 | No | FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api module interface... | 2026-10-16 |
| CVE-2026-69916 | high | 7.8 | No | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-69915 | high | 7.0 | No | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-107938 | critical | 9.1 | No | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s... | 2026-10-16 |
| CVE-2026-69914 | medium | 5.5 | No | Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. | 2026-10-16 |
| CVE-2026-107937 | high | 7.5 | No | In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (defaul... | 2026-10-16 |
| CVE-2026-85795 | high | 7.8 | No | Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. | 2026-10-16 |
| CVE-2026-69913 | high | 8.1 | No | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. | 2026-10-16 |