Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-28632 | medium | 4.0 | No | In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. This could lead to local inf... | 2026-11-04 |
| CVE-2026-121971 | not reported | — | No | The component ScopingHttpClient in Symfony HttpClient merges the options of its default scope (such as auth_bearer or auth_basic) into a req... | 2026-11-04 |
| CVE-2026-121927 | medium | 6.3 | No | A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function _account_get of the file common/da... | 2026-11-04 |
| CVE-2026-16491 | medium | 6.5 | No | Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings.... | 2026-11-04 |
| CVE-2026-12887 | not reported | — | No | In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the sc... | 2026-11-04 |
| CVE-2026-118131 | critical | 9.8 | No | GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\Pro... | 2026-11-04 |
| CVE-2026-117879 | high | 7.3 | No | Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR... | 2026-11-04 |
| CVE-2026-117878 | medium | 6.3 | No | Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ES... | 2026-11-04 |
| CVE-2026-117877 | medium | 6.3 | No | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and... | 2026-11-04 |
| CVE-2026-117876 | medium | 6.3 | No | Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6,... | 2026-11-04 |
| CVE-2026-117875 | medium | 6.3 | No | Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird... | 2026-11-04 |
| CVE-2026-117874 | medium | 6.3 | No | Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Th... | 2026-11-04 |
| CVE-2026-117873 | high | 8.1 | No | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firef... | 2026-11-04 |
| CVE-2026-117872 | high | 8.8 | No | Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 1... | 2026-11-04 |
| CVE-2026-117871 | high | 7.3 | No | Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird... | 2026-11-04 |
| CVE-2026-117865 | medium | 6.3 | No | Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunder... | 2026-11-04 |
| CVE-2026-117864 | high | 8.8 | No | Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbi... | 2026-11-04 |
| CVE-2026-117863 | medium | 6.5 | No | Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 11... | 2026-11-04 |
| CVE-2026-117862 | critical | 9.8 | No | Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox... | 2026-11-04 |
| CVE-2026-116660 | medium | 4.3 | No | Tanium addressed an improper access controls vulnerability in Enforce. | 2026-11-04 |