Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121033 | not reported | — | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the render... | 2026-11-03 |
| CVE-2026-121032 | not reported | — | No | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafte... | 2026-11-03 |
| CVE-2026-121031 | not reported | — | No | Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy into a privileged... | 2026-11-03 |
| CVE-2026-121029 | not reported | — | No | Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML... | 2026-11-03 |
| CVE-2026-121024 | medium | 5.4 | No | Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in... | 2026-11-03 |
| CVE-2026-121023 | medium | 5.5 | No | Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Lin... | 2026-11-03 |
| CVE-2026-121022 | high | 8.1 | No | Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticate... | 2026-11-03 |
| CVE-2026-121021 | medium | 5.5 | No | Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Lin... | 2026-11-03 |
| CVE-2026-121020 | medium | 4.3 | No | Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft Axxon One before 3.2.0 o... | 2026-11-03 |
| CVE-2026-120959 | low | 3.7 | No | A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a query to be written outside the bounds of a buff... | 2026-11-03 |
| CVE-2026-120952 | high | 7.1 | No | An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type is retrieved into a... | 2026-11-03 |
| CVE-2026-120734 | not reported | — | No | Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an auth... | 2026-11-03 |
| CVE-2026-120733 | not reported | — | No | Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier allows an attacker with re... | 2026-11-03 |
| CVE-2026-120716 | not reported | — | No | Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlie... | 2026-11-03 |
| CVE-2026-120715 | not reported | — | No | Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier allows an authentica... | 2026-11-03 |
| CVE-2026-120684 | medium | 6.5 | No | A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process memory to be treated... | 2026-11-03 |
| CVE-2026-120678 | high | 7.5 | No | A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to hold on to memory that i... | 2026-11-03 |
| CVE-2026-119636 | not reported | — | No | Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.2... | 2026-11-03 |
| CVE-2026-11404 | high | 7.5 | No | Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mg_tls_server_recv_hello(), which uses an at... | 2026-11-03 |
| CVE-2026-120673 | medium | 5.5 | No | A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic client-side field l... | 2026-11-03 |