Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-73020 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-11 |
| CVE-2026-87468 | medium | 6.5 | No | Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted... | 2026-09-11 |
| CVE-2026-87493 | medium | 6.5 | No | Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypas... | 2026-09-11 |
| CVE-2026-87519 | medium | 6.5 | No | Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to b... | 2026-09-11 |
| CVE-2026-87522 | medium | 6.5 | No | Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineeri... | 2026-09-11 |
| CVE-2026-82006 | high | 7.8 | No | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of... | 2026-09-11 |
| CVE-2026-82007 | high | 7.8 | No | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the contex... | 2026-09-11 |
| CVE-2026-89262 | high | 7.5 | No | MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against... | 2026-09-11 |
| CVE-2026-89251 | medium | 6.5 | No | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate ad impressions in plugin/AD_Server/log.php, allowing logged... | 2026-09-11 |
| CVE-2026-89246 | medium | 5.4 | No | WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a CSV formula injection vulnerability in the myComments.downloa... | 2026-09-11 |
| CVE-2026-73694 | high | 7.2 | No | FileRun before 2026.3.0 contains an OS command injection vulnerability caused by a no-op redefinition of escapeshellcmd() in CLI.php that st... | 2026-09-11 |
| CVE-2026-78451 | medium | 6.8 | No | Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physi... | 2026-09-11 |
| CVE-2026-78452 | medium | 4.6 | No | Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information with a physical attac... | 2026-09-11 |
| CVE-2026-78454 | medium | 5.5 | No | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. | 2026-09-11 |
| CVE-2026-82005 | high | 7.8 | No | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu... | 2026-09-11 |
| CVE-2026-76199 | high | 8.6 | No | Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the cont... | 2026-09-11 |
| CVE-2026-75863 | high | 7.8 | No | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the contex... | 2026-09-11 |
| CVE-2026-75862 | high | 7.8 | No | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the contex... | 2026-09-11 |
| CVE-2026-75771 | high | 7.8 | No | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the contex... | 2026-09-11 |
| CVE-2026-89066 | high | 7.8 | No | Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow conte... | 2026-09-11 |