Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121395 | medium | 6.5 | No | FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabl... | 2026-11-03 |
| CVE-2026-121396 | medium | 4.3 | No | FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_auth_verifier trigger... | 2026-11-03 |
| CVE-2026-120754 | low | 3.3 | No | HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c. The decode path... | 2026-11-03 |
| CVE-2026-84579 | high | 8.8 | No | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening... | 2026-11-03 |
| CVE-2026-120755 | medium | 5.5 | No | HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.c. When decoding a szip-compressed chun... | 2026-11-03 |
| CVE-2026-120756 | medium | 6.1 | No | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When decoding object header... | 2026-11-03 |
| CVE-2026-86868 | critical | 9.1 | No | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS... | 2026-11-03 |
| CVE-2026-86871 | medium | 5.9 | No | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-11-03 |
| CVE-2026-120757 | high | 7.1 | No | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default traversal call... | 2026-11-03 |
| CVE-2026-120758 | medium | 5.5 | No | HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a single metadat... | 2026-11-03 |
| CVE-2026-91459 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-03 |
| CVE-2026-91460 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-03 |
| CVE-2026-91475 | medium | 6.6 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-11-03 |
| CVE-2026-86907 | medium | 4.4 | No | An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app w... | 2026-11-03 |
| CVE-2026-86914 | medium | 5.5 | No | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.... | 2026-11-03 |
| CVE-2026-91668 | high | 8.8 | No | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that... | 2026-11-03 |
| CVE-2026-101436 | medium | 4.1 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-03 |
| CVE-2026-101437 | medium | 6.6 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-03 |
| CVE-2026-101438 | high | 8.0 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-03 |
| CVE-2026-101439 | medium | 5.9 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-03 |