Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-100245 | medium | 6.1 | No | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki... | 2026-09-30 |
| CVE-2026-100244 | high | 7.5 | No | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows Ex... | 2026-09-30 |
| CVE-2026-100243 | medium | 6.1 | No | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki... | 2026-09-30 |
| CVE-2026-100241 | high | 7.5 | No | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - EventBus Extension allows Excav... | 2026-09-30 |
| CVE-2026-100288 | high | 7.2 | No | Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access... | 2026-09-30 |
| CVE-2026-100612 | high | 7.2 | No | Capgo (capgo.app) through version 12.261.0 contains an incomplete access-control fix for the public.sso_providers table. Migration 202608261... | 2026-09-30 |
| CVE-2026-100238 | medium | 6.1 | No | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki... | 2026-09-30 |
| CVE-2026-102304 | critical | 9.6 | No | Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox... | 2026-09-30 |
| CVE-2026-102310 | medium | 6.5 | No | Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process... | 2026-09-30 |
| CVE-2026-102312 | medium | 4.3 | No | UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a c... | 2026-09-30 |
| CVE-2026-69275 | high | 7.0 | No | Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. | 2026-09-30 |
| CVE-2026-69276 | critical | 9.8 | No | Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a net... | 2026-09-30 |
| CVE-2026-69277 | high | 7.8 | No | Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locall... | 2026-09-30 |
| CVE-2026-69292 | high | 7.0 | No | Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally. | 2026-09-30 |
| CVE-2026-95310 | critical | 9.6 | No | Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox v... | 2026-09-30 |
| CVE-2026-95311 | critical | 9.6 | No | Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentia... | 2026-09-30 |
| CVE-2026-95371 | medium | 5.4 | No | Missing authorization in Views in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer... | 2026-09-30 |
| CVE-2026-76111 | high | 8.8 | No | Dell PowerStore contains an Incorrect Authorization vulnerability. An authenticated attacker with low privileges could potentially exploit t... | 2026-09-30 |
| CVE-2026-58575 | high | 8.8 | No | Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability. An authenticated attacker could potentially exploit this vulner... | 2026-09-30 |
| CVE-2026-79683 | high | 8.8 | No | Dell PowerStore contains a Protection Mechanism Failure vulnerability. An authenticated user with limited privileges could potentially explo... | 2026-09-30 |