Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-121042 | not reported | — | No | Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system acce... | 2026-11-03 |
| CVE-2026-121040 | not reported | — | No | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process t... | 2026-11-03 |
| CVE-2026-121033 | not reported | — | No | Uninitialized resource in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker who had compromised the render... | 2026-11-03 |
| CVE-2026-121032 | not reported | — | No | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafte... | 2026-11-03 |
| CVE-2026-121031 | not reported | — | No | Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy into a privileged... | 2026-11-03 |
| CVE-2026-121029 | not reported | — | No | Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML... | 2026-11-03 |
| CVE-2026-121024 | medium | 5.4 | No | Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows a remote attacker in... | 2026-11-03 |
| CVE-2026-121023 | medium | 5.5 | No | Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before 3.25.0 on Windows and Lin... | 2026-11-03 |
| CVE-2026-121022 | high | 8.1 | No | Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticate... | 2026-11-03 |
| CVE-2026-121021 | medium | 5.5 | No | Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Lin... | 2026-11-03 |
| CVE-2026-121020 | medium | 4.3 | No | Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft Axxon One before 3.2.0 o... | 2026-11-03 |
| CVE-2026-120684 | medium | 6.5 | No | A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process memory to be treated... | 2026-11-03 |
| CVE-2026-120678 | high | 7.5 | No | A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to hold on to memory that i... | 2026-11-03 |
| CVE-2026-11404 | high | 7.5 | No | Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mg_tls_server_recv_hello(), which uses an at... | 2026-11-03 |
| CVE-2026-120673 | medium | 5.5 | No | A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic client-side field l... | 2026-11-03 |
| CVE-2026-116838 | high | 8.8 | No | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found... | 2026-11-03 |
| CVE-2026-116837 | high | 8.8 | No | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, Solar... | 2026-11-03 |
| CVE-2026-116836 | high | 8.8 | No | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnera... | 2026-11-03 |
| CVE-2026-113945 | medium | 5.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to caus... | 2026-11-03 |
| CVE-2026-113904 | medium | 4.3 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-03 |