Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-59044 | high | 8.4 | No | In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege... | 2026-11-04 |
| CVE-2026-59043 | high | 7.4 | No | In arm_lpae_split_blk_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. This could lead to lo... | 2026-11-04 |
| CVE-2026-59042 | high | 7.4 | No | In __pkvm_pages_to_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of... | 2026-11-04 |
| CVE-2026-59031 | medium | 6.2 | No | In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. This could l... | 2026-11-04 |
| CVE-2026-59028 | high | 8.4 | No | In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to l... | 2026-11-04 |
| CVE-2026-59021 | medium | 6.2 | No | In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service wi... | 2026-11-04 |
| CVE-2026-59020 | medium | 5.9 | No | In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to loca... | 2026-11-04 |
| CVE-2026-59016 | high | 8.4 | No | In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. This could lead to local esc... | 2026-11-04 |
| CVE-2026-59015 | medium | 4.0 | No | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with... | 2026-11-04 |
| CVE-2026-59014 | high | 8.4 | No | In multiple locations, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege... | 2026-11-04 |
| CVE-2026-58925 | high | 7.8 | No | The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from... | 2026-11-04 |
| CVE-2026-58926 | low | 2.5 | No | A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thre... | 2026-11-04 |
| CVE-2026-58924 | high | 7.5 | No | The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte... | 2026-11-04 |
| CVE-2026-86966 | medium | 5.5 | No | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macO... | 2026-11-04 |
| CVE-2026-86968 | high | 7.5 | No | An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionO... | 2026-11-04 |
| CVE-2026-86973 | medium | 6.5 | No | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.... | 2026-11-04 |
| CVE-2026-86974 | high | 7.5 | No | A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iP... | 2026-11-04 |
| CVE-2026-86990 | medium | 5.1 | No | An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadO... | 2026-11-04 |
| CVE-2026-112568 | medium | 5.5 | No | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. P... | 2026-11-04 |
| CVE-2026-116242 | critical | 9.6 | No | pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it always loaded th... | 2026-11-04 |