Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-58876 | critical | 9.8 | No | In multiple locations, there is a possible memory safety issue due to a use-after-free. This could lead to remote code execution with no add... | 2026-11-04 |
| CVE-2026-91362 | medium | 5.3 | No | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that a... | 2026-11-04 |
| CVE-2026-121047 | high | 8.8 | No | Buffer overflow in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via... | 2026-11-04 |
| CVE-2026-114408 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handl... | 2026-11-04 |
| CVE-2026-113942 | high | 7.1 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-04 |
| CVE-2026-113915 | medium | 4.7 | No | A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, ma... | 2026-11-04 |
| CVE-2026-113903 | medium | 6.5 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Go... | 2026-11-04 |
| CVE-2026-113899 | medium | 5.5 | No | The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An ap... | 2026-11-04 |
| CVE-2026-113898 | low | 3.3 | No | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, m... | 2026-11-04 |
| CVE-2026-112689 | high | 8.4 | No | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112676 | high | 7.5 | No | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2,... | 2026-11-04 |
| CVE-2026-112555 | high | 8.2 | No | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macO... | 2026-11-04 |
| CVE-2026-112430 | high | 7.8 | No | An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequ... | 2026-11-04 |
| CVE-2026-112410 | high | 7.5 | No | A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macO... | 2026-11-04 |
| CVE-2026-103327 | medium | 5.3 | No | The CryptoCloud WordPress plugin from 3.0.0 through 3.0.1 does not verify the authenticity of the payment notifications received by its gate... | 2026-11-04 |
| CVE-2026-106465 | not reported | — | No | In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603, the NetX Secure DTLS server never compares the cookie a client returns with t... | 2026-11-04 |
| CVE-2026-106464 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the NetX Secure X.509 parser accepts a certificate whose signature is... | 2026-11-04 |
| CVE-2026-102730 | not reported | — | No | Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAN... | 2026-11-04 |
| CVE-2026-102718 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the SNMP agent's OID parser uses a multi-byte BER length from the req... | 2026-11-04 |
| CVE-2026-102716 | not reported | — | No | In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the RTSP server returns a raw parser error for a malformed Session he... | 2026-11-04 |