Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2023-36049 | critical | 9.8 | No | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 2026-11-02 |
| CVE-2023-45862 | medium | 5.5 | No | An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object cou... | 2026-11-02 |
| CVE-2023-39214 | high | 8.1 | No | Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via netwo... | 2026-11-02 |
| CVE-2023-36009 | medium | 5.5 | No | Microsoft Word Information Disclosure Vulnerability | 2026-11-02 |
| CVE-2023-30588 | medium | 5.3 | No | When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs maki... | 2026-11-02 |
| CVE-2023-29074 | critical | 9.8 | No | A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicio... | 2026-11-02 |
| CVE-2023-29073 | critical | 9.8 | No | A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A mal... | 2026-11-02 |
| CVE-2023-32558 | high | 7.5 | No | The use of the deprecated API `process.binding()` can bypass the permission model through path traversal. This vulnerability affects all u... | 2026-11-02 |
| CVE-2023-35947 | high | 8.1 | No | Gradle is a build tool with a focus on build automation and support for multi-language development. In affected versions when unpacking Tar... | 2026-11-02 |
| CVE-2023-29007 | high | 7.8 | No | Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40... | 2026-11-02 |
| CVE-2023-25815 | low | 2.2 | No | In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to... | 2026-11-02 |
| CVE-2023-23384 | high | 7.3 | No | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-27537 | medium | 5.9 | No | A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without... | 2026-11-02 |
| CVE-2023-22329 | low | 3.5 | No | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of... | 2026-11-02 |
| CVE-2023-21713 | high | 8.8 | No | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-21705 | high | 8.8 | No | Microsoft SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-21704 | high | 7.8 | No | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2023-21568 | high | 7.3 | No | Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2022-48564 | medium | 6.5 | No | read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malforme... | 2026-11-02 |
| CVE-2022-48560 | high | 7.5 | No | A use-after-free exists in Python through 3.9 via heappushpop in heapq. | 2026-11-02 |