Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-120756 | medium | 6.1 | No | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c. When decoding object header... | 2026-11-03 |
| CVE-2026-86868 | critical | 9.1 | No | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS... | 2026-11-03 |
| CVE-2026-86871 | medium | 5.9 | No | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Ta... | 2026-11-03 |
| CVE-2026-120757 | high | 7.1 | No | HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the default traversal call... | 2026-11-03 |
| CVE-2026-120758 | medium | 5.5 | No | HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.c. H5HL_protect() pins a single metadat... | 2026-11-03 |
| CVE-2026-91459 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-03 |
| CVE-2026-91460 | high | 7.8 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supporte... | 2026-11-03 |
| CVE-2026-91475 | medium | 6.6 | No | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The support... | 2026-11-03 |
| CVE-2026-86907 | medium | 4.4 | No | An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app w... | 2026-11-03 |
| CVE-2026-86914 | medium | 5.5 | No | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.... | 2026-11-03 |
| CVE-2026-91668 | high | 8.8 | No | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that... | 2026-11-03 |
| CVE-2026-112669 | medium | 6.5 | No | A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate... | 2026-11-03 |
| CVE-2026-112413 | medium | 6.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS... | 2026-11-03 |
| CVE-2026-88066 | not reported | — | No | Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe... | 2026-11-03 |
| CVE-2026-115716 | medium | 6.5 | No | Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized Serialized Data Pay... | 2026-11-03 |
| CVE-2026-115715 | medium | 6.5 | No | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to denial of service via a specially crafted input... | 2026-11-03 |
| CVE-2026-115714 | high | 7.4 | No | Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat,... | 2026-11-03 |
| CVE-2026-115710 | medium | 4.2 | No | Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure and incorrect search results via... | 2026-11-03 |
| CVE-2026-115298 | medium | 4.3 | No | Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not Properly Constrained b... | 2026-11-03 |
| CVE-2026-115297 | medium | 6.5 | No | NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network tra... | 2026-11-03 |