Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-54228 | high | 7.8 | No | A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory cre... | 2026-11-04 |
| CVE-2026-52720 | high | 8.8 | No | A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area... | 2026-11-04 |
| CVE-2026-52719 | high | 7.1 | No | An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad. The JPEG parser reads a segment length... | 2026-11-04 |
| CVE-2026-50264 | high | 7.8 | No | An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests mu... | 2026-11-04 |
| CVE-2026-50261 | high | 7.8 | No | A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can t... | 2026-11-04 |
| CVE-2026-50260 | high | 7.8 | No | A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits... | 2026-11-04 |
| CVE-2026-50259 | high | 7.8 | No | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWi... | 2026-11-04 |
| CVE-2026-50258 | high | 7.8 | No | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLe... | 2026-11-04 |
| CVE-2026-50257 | high | 7.8 | No | A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers ca... | 2026-11-04 |
| CVE-2026-50256 | high | 7.8 | No | A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's... | 2026-11-04 |
| CVE-2026-4878 | high | 7.0 | No | A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_fil... | 2026-11-04 |
| CVE-2026-4802 | high | 8.0 | No | A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting un... | 2026-11-04 |
| CVE-2026-4775 | high | 7.8 | No | A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44... | 2026-11-04 |
| CVE-2026-4480 | critical | 9.0 | No | A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with t... | 2026-11-04 |
| CVE-2026-4631 | critical | 9.8 | No | Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or s... | 2026-11-04 |
| CVE-2026-4424 | high | 7.5 | No | A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper valida... | 2026-11-04 |
| CVE-2026-4408 | critical | 9.8 | No | A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use th... | 2026-11-04 |
| CVE-2026-47678 | not reported | — | No | GLPI is a free asset and IT management software package. From 9.4.0 until 10.0.26 and 11.0.8, any authenticated user can submit crafted valu... | 2026-11-04 |
| CVE-2026-48863 | high | 7.5 | No | A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length ha... | 2026-11-04 |
| CVE-2026-4111 | high | 7.5 | No | A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() process... | 2026-11-04 |