Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-122126 | medium | 5.9 | No | reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader() that allows malicious TURN ser... | 2026-11-04 |
| CVE-2026-122013 | critical | 10.0 | No | A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. Affected by this vulnerability is an unknown functionality of the file /usr/bin/... | 2026-11-04 |
| CVE-2026-122009 | high | 7.3 | No | A flaw has been found in DataLinkDC Dinky up to 1.2.5. This vulnerability affects the function FlinkWebURITemplateProxyServlet.getNewTargetU... | 2026-11-04 |
| CVE-2026-122008 | medium | 5.0 | No | Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the UploadFile endpoint of FileController.cs that all... | 2026-11-04 |
| CVE-2026-122006 | critical | 9.8 | No | The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read and write opera... | 2026-11-04 |
| CVE-2026-121969 | medium | 6.5 | No | netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage() in short.c that allows malicious se... | 2026-11-04 |
| CVE-2026-121968 | medium | 6.5 | No | Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSMessage() that allows malicious servers to cr... | 2026-11-04 |
| CVE-2026-121941 | high | 7.8 | No | libmt32emu before 2.8.4 contains a heap buffer overflow vulnerability in MidiStreamParserImpl::parseSysex that allows attackers to write pas... | 2026-11-04 |
| CVE-2026-121255 | medium | 6.5 | No | Incorrect authorization in Autofill AI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a c... | 2026-11-04 |
| CVE-2026-121252 | high | 8.8 | No | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted... | 2026-11-04 |
| CVE-2026-121251 | high | 8.8 | No | Missing authorization in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML... | 2026-11-04 |
| CVE-2026-121244 | medium | 5.4 | No | UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI... | 2026-11-04 |
| CVE-2026-121236 | high | 8.8 | No | Improper input validation in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a cra... | 2026-11-04 |
| CVE-2026-121222 | high | 8.8 | No | Incorrect authorization in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted... | 2026-11-04 |
| CVE-2026-121216 | medium | 5.4 | No | UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI eleme... | 2026-11-04 |
| CVE-2026-121215 | medium | 5.4 | No | UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML... | 2026-11-04 |
| CVE-2026-121213 | medium | 6.5 | No | Uninitialized resource in Images in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted... | 2026-11-04 |
| CVE-2026-121212 | high | 8.8 | No | Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted... | 2026-11-04 |
| CVE-2026-121206 | medium | 5.4 | No | UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI... | 2026-11-04 |
| CVE-2026-121205 | high | 8.8 | No | Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass we... | 2026-11-04 |