Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-69778 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-09-10 |
| CVE-2026-77907 | high | 8.8 | No | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 2026-09-10 |
| CVE-2026-69614 | high | 8.8 | No | Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-09-10 |
| CVE-2026-69529 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. | 2026-09-10 |
| CVE-2026-69477 | high | 7.3 | No | Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally. | 2026-09-10 |
| CVE-2026-86737 | medium | 4.3 | No | snipe-it versions before 8.7.0 fail to enforce asset view authorization in the GET /hardware/{asset}/barcode endpoint. Authenticated attacke... | 2026-09-10 |
| CVE-2026-86732 | high | 8.8 | No | Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated cont... | 2026-09-10 |
| CVE-2026-86727 | high | 7.5 | No | AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to... | 2026-09-10 |
| CVE-2026-86722 | high | 8.1 | No | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty res... | 2026-09-10 |
| CVE-2026-86666 | high | 7.3 | No | A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_json/uploadFile of the file contr... | 2026-09-10 |
| CVE-2026-76202 | high | 8.2 | No | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage... | 2026-09-10 |
| CVE-2026-61517 | high | 7.2 | No | Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command injection vulnerability in the ping diagnostic handler that allows aut... | 2026-09-10 |
| CVE-2026-81988 | high | 7.8 | No | Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current use... | 2026-09-10 |
| CVE-2026-75669 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75675 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75681 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75720 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75710 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75715 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |
| CVE-2026-75685 | medium | 5.4 | No | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu... | 2026-09-10 |