Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-40660 | not reported | — | No | A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-b... | 2026-11-03 |
| CVE-2026-40659 | not reported | — | No | An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDr... | 2026-11-03 |
| CVE-2026-49906 | high | 7.8 | No | An unprivileged application can bypass the `android.car.permission.CAR_DISPLAY_IN_CLUSTER` permission by registering an activity with the `a... | 2026-11-03 |
| CVE-2026-121513 | high | 7.5 | No | Off-by-one Heap Overflow in µD3TN v0.15.1 SPP Parser allows Unauthenticated Remote Attacker to Reliably Cause DoS | 2026-11-03 |
| CVE-2026-121512 | high | 7.5 | No | Memory Leak with Amplification in µD3TN BPv6 EID Reference Handling allows Unauthenticated Remote Attacker to Cause DoS | 2026-11-03 |
| CVE-2026-121511 | high | 7.1 | No | Heap Out-of-Bounds Read in µD3TN BPv6/BPv7 Fragmenter allows Local Attacker to Read Memory and Reliably Cause DoS | 2026-11-03 |
| CVE-2026-121510 | high | 7.5 | No | Remote Unauthenticated Heap Out-of-Bounds Write in µD3TN BPv6 Administrative Record Parser allows Unauthenticated Remote Attacker to Reliabl... | 2026-11-03 |
| CVE-2026-121508 | medium | 5.9 | No | Use-After-Free in µD3TN BPv6 Fragmenter Cleanup allows Unauthenticated Remote Attacker to Cause DoS on Allocation Failure | 2026-11-03 |
| CVE-2026-121455 | medium | 5.4 | No | DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGIN_PER... | 2026-11-03 |
| CVE-2026-121507 | medium | 5.9 | No | Double Free in µD3TN BPv6 Fragmenter Block Duplication allows Unauthenticated Remote Attacker to Cause DoS on Allocation Failure | 2026-11-03 |
| CVE-2026-121506 | high | 7.4 | No | An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5 allows a remote attacker w... | 2026-11-03 |
| CVE-2026-119140 | medium | 4.8 | No | Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows malicious components to panic... | 2026-11-03 |
| CVE-2026-119136 | medium | 4.8 | No | Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insufficient checks in Store when mixing async-style and sync-style WebAssem... | 2026-11-03 |
| CVE-2026-119132 | medium | 4.8 | No | Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest to trigger a host panic by tra... | 2026-11-03 |
| CVE-2026-119128 | high | 7.4 | No | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to set... | 2026-11-03 |
| CVE-2026-119124 | medium | 5.5 | No | ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bou... | 2026-11-03 |
| CVE-2026-119120 | high | 7.5 | No | Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authen... | 2026-11-03 |
| CVE-2026-119051 | medium | 5.9 | No | flat through 6.0.1 contains an uncontrolled resource allocation vulnerability in unflatten() that allows attackers to create huge sparse arr... | 2026-11-03 |
| CVE-2026-119025 | high | 7.5 | No | open 7.2.0 before 11.0.0 contains an OS command injection vulnerability that allows attackers to execute PowerShell code by supplying crafte... | 2026-11-03 |
| CVE-2026-117627 | medium | 5.4 | No | A flaw was found in the JWT Authorization Grant implementation of the keycloak-services component. When an OIDC or Google identity provider... | 2026-11-03 |