Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-87400 | medium | 6.9 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is... | 2026-11-03 |
| CVE-2026-87370 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-11-03 |
| CVE-2026-87365 | medium | 6.5 | No | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are a... | 2026-11-03 |
| CVE-2026-96203 | high | 8.8 | No | Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | 2026-11-03 |
| CVE-2026-62765 | high | 8.1 | No | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute... | 2026-11-03 |
| CVE-2026-85898 | high | 8.8 | No | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute... | 2026-11-03 |
| CVE-2026-83831 | high | 8.8 | No | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-11-03 |
| CVE-2026-116158 | medium | 5.5 | No | ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation f... | 2026-11-03 |
| CVE-2026-96187 | high | 7.4 | No | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose... | 2026-11-03 |
| CVE-2026-88078 | medium | 4.3 | No | Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over... | 2026-11-03 |
| CVE-2026-20942 | medium | 4.3 | No | Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing... | 2026-11-03 |
| CVE-2026-85890 | high | 8.8 | No | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-11-03 |
| CVE-2026-85897 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-11-03 |
| CVE-2026-85899 | high | 8.1 | No | Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network. | 2026-11-03 |
| CVE-2026-88077 | high | 8.8 | No | Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. | 2026-11-03 |
| CVE-2026-88090 | medium | 5.4 | No | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate... | 2026-11-03 |
| CVE-2026-96196 | high | 8.8 | No | Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a... | 2026-11-03 |
| CVE-2026-96198 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-11-03 |
| CVE-2026-96199 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | 2026-11-03 |
| CVE-2026-98058 | medium | 5.5 | No | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable bpf_sys_bpf() executes the bpf(... | 2026-11-03 |