Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-7477 | high | 7.8 | No | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture K... | 2026-09-10 |
| CVE-2026-7476 | high | 7.8 | No | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture K... | 2026-09-10 |
| CVE-2026-75307 | medium | 6.1 | No | zhitan-ems 1.0.0 is vulnerable to Cross Site Scripting (XSS) via SVG file upload through the /equipmentFile/upload endpoint. | 2026-09-10 |
| CVE-2026-71803 | medium | 5.4 | No | money-pos 1.0 contains a stored Cross-Site Scripting (XSS) vulnerability. When processing returns, the backend fails to filter or escape the... | 2026-09-10 |
| CVE-2026-79602 | high | 8.8 | No | A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen. | 2026-09-10 |
| CVE-2026-69402 | medium | 5.4 | No | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att... | 2026-09-10 |
| CVE-2026-5729 | high | 7.8 | No | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-pri... | 2026-09-10 |
| CVE-2026-62437 | medium | 6.5 | No | When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and t... | 2026-09-10 |
| CVE-2026-62652 | medium | 5.3 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symb... | 2026-09-10 |
| CVE-2026-62646 | high | 7.4 | No | A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insuf... | 2026-09-10 |
| CVE-2026-44950 | critical | 9.0 | No | fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks vali... | 2026-09-10 |
| CVE-2026-11891 | medium | 5.1 | No | Use After Free vulnerability in Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-pri... | 2026-09-10 |
| CVE-2026-0860 | high | 7.5 | No | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Archi... | 2026-09-10 |
| CVE-2026-87472 | medium | 4.2 | No | Improper input validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer proces... | 2026-09-10 |
| CVE-2026-87482 | medium | 5.9 | No | Cleartext transmission of sensitive data in HttpsUpgrades in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to lea... | 2026-09-10 |
| CVE-2026-87483 | medium | 6.5 | No | Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access r... | 2026-09-10 |
| CVE-2026-87484 | medium | 5.4 | No | UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI... | 2026-09-10 |
| CVE-2026-87486 | medium | 4.0 | No | Clickjacking in TrustedWebActivities in Google Chrome on on Android prior to 153.0.8010.36 allowed a local attacker to spoof address bar via... | 2026-09-10 |
| CVE-2026-69298 | high | 7.8 | No | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-10 |
| CVE-2026-69323 | high | 7.8 | No | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | 2026-09-10 |