Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-43677 | medium | 6.5 | No | An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8,... | 2026-09-15 |
| CVE-2026-43687 | medium | 6.5 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden G... | 2026-09-15 |
| CVE-2026-43783 | high | 7.8 | No | A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root priv... | 2026-09-15 |
| CVE-2026-43689 | high | 7.8 | No | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS... | 2026-09-15 |
| CVE-2026-43692 | high | 8.8 | No | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-09-15 |
| CVE-2026-43761 | medium | 6.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8,... | 2026-09-15 |
| CVE-2026-86144 | high | 7.8 | No | In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance... | 2026-09-15 |
| CVE-2026-67639 | high | 8.8 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 2026-09-15 |
| CVE-2026-90852 | high | 7.3 | No | A vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the fil... | 2026-09-15 |
| CVE-2026-90847 | critical | 9.1 | No | A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the compone... | 2026-09-15 |
| CVE-2026-90842 | low | 3.7 | No | A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the... | 2026-09-15 |
| CVE-2026-90611 | low | 3.3 | No | A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of... | 2026-09-15 |
| CVE-2026-90606 | critical | 9.9 | No | A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file... | 2026-09-15 |
| CVE-2026-90601 | high | 7.3 | No | A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the c... | 2026-09-15 |
| CVE-2026-90578 | medium | 5.3 | No | A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component... | 2026-09-15 |
| CVE-2026-85657 | medium | 5.4 | No | The Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors plugin for WordPress is vulnerable to Stored C... | 2026-09-15 |
| CVE-2026-85205 | medium | 6.3 | No | A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addwishlist of the file... | 2026-09-15 |
| CVE-2026-83978 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-15 |
| CVE-2026-66790 | not reported | — | No | Rejected reason: This CVE ID was assigned in error as a duplicate of CVE-2026-70496, which describes the same vulnerability. Please use CVE-... | 2026-09-15 |
| CVE-2026-66789 | not reported | — | No | Rejected reason: This CVE ID was assigned in error as a duplicate of CVE-2026-70495, which describes the same vulnerability. Please use CVE-... | 2026-09-15 |