Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-13465 | high | 8.1 | No | Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memo... | 2026-09-24 |
| CVE-2026-57590 | high | 8.1 | No | A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whe... | 2026-09-24 |
| CVE-2026-94183 | high | 7.4 | No | Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is... | 2026-09-24 |
| CVE-2026-94181 | high | 7.4 | No | An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that trigge... | 2026-09-24 |
| CVE-2026-55294 | high | 7.8 | No | In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loca... | 2026-09-24 |
| CVE-2026-55290 | low | 3.3 | No | In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could lead to local informati... | 2026-09-24 |
| CVE-2026-69397 | high | 7.5 | No | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-69398 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorize... | 2026-09-24 |
| CVE-2026-80145 | critical | 9.1 | No | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SL... | 2026-09-24 |
| CVE-2026-80144 | critical | 9.9 | No | Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SL... | 2026-09-24 |
| CVE-2026-75743 | high | 7.1 | No | Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature... | 2026-09-24 |
| CVE-2026-48072 | medium | 5.3 | No | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts att... | 2026-09-24 |
| CVE-2026-69429 | high | 7.5 | No | Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network. | 2026-09-24 |
| CVE-2026-69430 | high | 7.0 | No | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69809 | high | 7.5 | No | Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over... | 2026-09-24 |
| CVE-2026-69801 | high | 7.8 | No | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-69799 | high | 7.8 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker t... | 2026-09-24 |
| CVE-2026-69563 | high | 7.0 | No | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. | 2026-09-24 |
| CVE-2026-58874 | high | 7.8 | No | In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission check. This could lead... | 2026-09-24 |
| CVE-2026-69553 | high | 7.5 | No | Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network. | 2026-09-24 |