Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112606 | medium | 6.2 | No | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS... | 2026-11-04 |
| CVE-2026-112601 | medium | 6.2 | No | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.8.2. An app may be able to cause a... | 2026-11-04 |
| CVE-2026-112523 | medium | 5.5 | No | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Taho... | 2026-11-04 |
| CVE-2026-112485 | high | 7.8 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoi... | 2026-11-04 |
| CVE-2026-112482 | high | 8.1 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.... | 2026-11-04 |
| CVE-2026-112470 | high | 7.8 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112466 | high | 7.1 | No | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS... | 2026-11-04 |
| CVE-2026-112116 | not reported | — | No | An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arb... | 2026-11-04 |
| CVE-2026-110464 | not reported | — | No | Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local Sy... | 2026-11-04 |
| CVE-2026-112355 | high | 7.5 | No | The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauthenticated attackers... | 2026-11-04 |
| CVE-2026-112416 | medium | 5.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-106554 | not reported | — | No | One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time TagList growth (CPU/... | 2026-11-04 |
| CVE-2026-107176 | medium | 6.8 | No | A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, an... | 2026-11-04 |
| CVE-2026-104799 | high | 8.8 | No | The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the `wcfmmp_pr... | 2026-11-04 |
| CVE-2026-100302 | not reported | — | No | Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash... | 2026-11-04 |
| CVE-2026-100300 | not reported | — | No | Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper... | 2026-11-04 |
| CVE-2026-90631 | low | 3.3 | No | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a doc... | 2026-11-04 |
| CVE-2026-90632 | medium | 5.5 | No | Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia c... | 2026-11-04 |
| CVE-2026-91392 | low | 3.7 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |
| CVE-2026-91393 | low | 3.1 | No | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26... | 2026-11-04 |