Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-105781 | critical | 10.0 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerab... | 2026-11-02 |
| CVE-2026-104353 | critical | 9.9 | No | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vu... | 2026-11-02 |
| CVE-2026-104063 | medium | 6.1 | No | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when... | 2026-11-02 |
| CVE-2026-104062 | high | 7.8 | No | Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that al... | 2026-11-02 |
| CVE-2026-69964 | high | 7.0 | No | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-69963 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-69867 | high | 7.8 | No | Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-69736 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authoriz... | 2026-11-02 |
| CVE-2026-69721 | medium | 5.5 | No | Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. | 2026-11-02 |
| CVE-2026-69705 | critical | 9.8 | No | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. | 2026-11-02 |
| CVE-2026-69675 | medium | 5.5 | No | Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally. | 2026-11-02 |
| CVE-2026-109677 | medium | 6.5 | No | FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR patt... | 2026-11-02 |
| CVE-2026-109676 | high | 8.8 | No | FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed... | 2026-11-02 |
| CVE-2026-109255 | medium | 6.8 | No | FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server t... | 2026-11-02 |
| CVE-2026-109254 | medium | 5.9 | No | FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats... | 2026-11-02 |
| CVE-2026-109253 | medium | 5.3 | No | FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length bef... | 2026-11-02 |
| CVE-2026-109252 | medium | 5.3 | No | FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to... | 2026-11-02 |
| CVE-2026-109251 | medium | 5.3 | No | FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the... | 2026-11-02 |
| CVE-2026-109250 | medium | 6.6 | No | FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fi... | 2026-11-02 |
| CVE-2026-109249 | medium | 5.5 | No | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing... | 2026-11-02 |