Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2025-26598 | high | 7.8 | No | An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer device based on its de... | 2026-11-04 |
| CVE-2025-26597 | high | 7.8 | No | A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize the key symbols ta... | 2026-11-04 |
| CVE-2025-26596 | high | 7.8 | No | A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from what is written in XkbW... | 2026-11-04 |
| CVE-2025-26595 | high | 7.8 | No | A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on the stack and copies... | 2026-11-04 |
| CVE-2025-23368 | high | 8.1 | No | A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authenticat... | 2026-11-04 |
| CVE-2025-1801 | high | 8.1 | No | A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to... | 2026-11-04 |
| CVE-2025-26594 | high | 7.8 | No | A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variable. If a client frees... | 2026-11-04 |
| CVE-2025-1244 | high | 8.8 | No | A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell co... | 2026-11-04 |
| CVE-2025-14523 | high | 8.2 | No | A flaw in libsoup’s HTTP header handling allows multiple Host: headers in a request and returns the last occurrence for server-side processi... | 2026-11-04 |
| CVE-2025-13947 | high | 7.4 | No | A flaw was found in WebKitGTK. This vulnerability allows remote, user-assisted information disclosure that can reveal any file the user is p... | 2026-11-04 |
| CVE-2025-13502 | high | 7.5 | No | A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess... | 2026-11-04 |
| CVE-2025-12543 | critical | 9.6 | No | A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fa... | 2026-11-04 |
| CVE-2025-10230 | critical | 10.0 | No | A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper... | 2026-11-04 |
| CVE-2025-11561 | high | 8.8 | No | A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems. In default configur... | 2026-11-04 |
| CVE-2025-11021 | high | 7.5 | No | A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communic... | 2026-11-04 |
| CVE-2025-0624 | high | 7.6 | No | A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user c... | 2026-11-04 |
| CVE-2024-9675 | medium | 4.4 | No | A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache dir... | 2026-11-04 |
| CVE-2024-9632 | high | 7.8 | No | A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger... | 2026-11-04 |
| CVE-2024-9050 | high | 7.8 | No | A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to properly sanitize the VPN... | 2026-11-04 |
| CVE-2024-5564 | high | 8.1 | No | A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by send... | 2026-11-04 |