Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2022-22018 | high | 7.8 | No | HEVC Video Extensions Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2021-4217 | low | 3.3 | No | A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereferenc... | 2026-11-02 |
| CVE-2021-4204 | high | 7.1 | No | An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local... | 2026-11-02 |
| CVE-2021-4159 | medium | 4.4 | No | A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be ret... | 2026-11-02 |
| CVE-2021-4187 | high | 7.8 | No | vim is vulnerable to Use After Free | 2026-11-02 |
| CVE-2021-4173 | high | 7.8 | No | vim is vulnerable to Use After Free | 2026-11-02 |
| CVE-2021-43877 | high | 8.8 | No | ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | 2026-11-02 |
| CVE-2021-43809 | high | 7.3 | No | `Bundler` is a package for managing application dependencies in Ruby. In `bundler` versions before 2.2.33, when working with untrusted and a... | 2026-11-02 |
| CVE-2021-42322 | high | 7.8 | No | Visual Studio Code Elevation of Privilege Vulnerability | 2026-11-02 |
| CVE-2021-41184 | medium | 6.1 | No | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()... | 2026-11-02 |
| CVE-2021-3826 | medium | 6.5 | No | Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of servic... | 2026-11-02 |
| CVE-2021-3997 | medium | 5.5 | No | A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested... | 2026-11-02 |
| CVE-2021-38593 | high | 7.5 | No | Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill a... | 2026-11-02 |
| CVE-2021-34532 | medium | 5.5 | No | ASP.NET Core and Visual Studio Information Disclosure Vulnerability | 2026-11-02 |
| CVE-2021-36976 | medium | 6.5 | No | libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block). | 2026-11-02 |
| CVE-2021-34528 | high | 7.8 | No | Visual Studio Code Remote Code Execution Vulnerability | 2026-11-02 |
| CVE-2026-115654 | not reported | — | No | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a... | 2026-11-02 |
| CVE-2026-115653 | not reported | — | No | In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module t... | 2026-11-02 |
| CVE-2026-120459 | high | 7.4 | No | python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs because HMACKe... | 2026-11-02 |
| CVE-2026-120455 | medium | 6.1 | No | rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows attackers to corrupt me... | 2026-11-02 |