Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87583 | medium | 5.4 | No | UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a... | 2026-09-10 |
| CVE-2026-87586 | medium | 4.3 | No | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a craft... | 2026-09-10 |
| CVE-2026-87592 | medium | 4.3 | No | Out of bounds read in Tint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially read memory inside the sandbox v... | 2026-09-10 |
| CVE-2026-87596 | medium | 4.3 | No | Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a craft... | 2026-09-10 |
| CVE-2026-87597 | medium | 4.8 | No | UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via... | 2026-09-10 |
| CVE-2026-87599 | medium | 5.4 | No | Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a craf... | 2026-09-10 |
| CVE-2026-87615 | medium | 5.4 | No | Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI eleme... | 2026-09-10 |
| CVE-2026-81991 | medium | 5.5 | No | Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could lever... | 2026-09-10 |
| CVE-2026-87624 | medium | 4.2 | No | UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the re... | 2026-09-10 |
| CVE-2026-87630 | medium | 4.3 | No | Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted... | 2026-09-10 |
| CVE-2026-81993 | medium | 5.5 | No | Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker coul... | 2026-09-10 |
| CVE-2026-4601 | critical | 9.1 | No | Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash pro... | 2026-09-10 |
| CVE-2026-4600 | critical | 9.1 | No | Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parame... | 2026-09-10 |
| CVE-2026-42044 | critical | 9.1 | No | Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.15.2, he Axios library is vulnerable to a Prototype... | 2026-09-10 |
| CVE-2026-42043 | critical | 10.0 | No | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL o... | 2026-09-10 |
| CVE-2026-28802 | critical | 9.8 | No | Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involv... | 2026-09-10 |
| CVE-2026-27606 | critical | 9.8 | No | Rollup is a module bundler for JavaScript. Versions prior to 2.80.0, 3.30.0, and 4.59.0 of the Rollup module bundler (specifically v4.x and... | 2026-09-10 |
| CVE-2026-27459 | critical | 9.8 | No | pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callbac... | 2026-09-10 |
| CVE-2026-85546 | not reported | — | No | MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addSer... | 2026-09-10 |
| CVE-2026-87804 | not reported | — | No | Rejected reason: no security impact | 2026-09-10 |