Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-20570 | medium | 6.7 | No | In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious... | 2026-11-03 |
| CVE-2026-20569 | medium | 6.7 | No | In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor... | 2026-11-03 |
| CVE-2026-20568 | medium | 6.7 | No | In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a malicious actor has al... | 2026-11-03 |
| CVE-2026-20567 | medium | 6.7 | No | In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicio... | 2026-11-03 |
| CVE-2026-20565 | high | 8.4 | No | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no... | 2026-11-03 |
| CVE-2026-20559 | high | 7.8 | No | In GPU pdma, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with User executi... | 2026-11-03 |
| CVE-2026-20558 | high | 8.4 | No | In GPU pdma, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege with no add... | 2026-11-03 |
| CVE-2026-20554 | high | 7.1 | No | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has con... | 2026-11-03 |
| CVE-2026-20546 | high | 7.5 | No | In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a... | 2026-11-03 |
| CVE-2026-120577 | high | 8.1 | No | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to arbitrary file deletion due to in... | 2026-11-03 |
| CVE-2026-18199 | high | 8.8 | No | Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote C... | 2026-11-03 |
| CVE-2026-120559 | high | 7.5 | No | The Contact Form Extender for Divi Builder plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient file path valid... | 2026-11-03 |
| CVE-2026-120538 | high | 8.1 | No | The Easy Digital Downloads plugin for WordPress is vulnerable to authentication bypass leading to administrator account takeover in all vers... | 2026-11-03 |
| CVE-2026-116606 | not reported | — | No | An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to in... | 2026-11-03 |
| CVE-2026-112697 | high | 8.8 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-03 |
| CVE-2026-112688 | high | 8.8 | No | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS... | 2026-11-03 |
| CVE-2026-112639 | high | 8.8 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-03 |
| CVE-2026-112637 | high | 8.8 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Go... | 2026-11-03 |
| CVE-2026-112626 | high | 8.8 | No | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS... | 2026-11-03 |
| CVE-2026-111560 | not reported | — | No | Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Bar... | 2026-11-03 |