Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-108304 | high | 7.8 | No | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | 2026-11-04 |
| CVE-2026-108141 | not reported | — | No | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to w... | 2026-11-04 |
| CVE-2026-107671 | not reported | — | No | A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally bef... | 2026-11-04 |
| CVE-2026-106078 | not reported | — | No | A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses... | 2026-11-04 |
| CVE-2026-105987 | not reported | — | No | KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker c... | 2026-11-04 |
| CVE-2026-105323 | medium | 6.1 | No | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications... | 2026-11-04 |
| CVE-2026-107362 | high | 7.1 | No | The bundled FilePond PHP server in Malcolm's file-upload component exposes a fetch route that retrieves an arbitrary URL and returns the res... | 2026-11-04 |
| CVE-2025-64394 | not reported | — | No | A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup... | 2026-11-04 |
| CVE-2026-112569 | high | 8.2 | No | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mac... | 2026-11-04 |
| CVE-2026-112570 | high | 8.2 | No | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, mac... | 2026-11-04 |
| CVE-2026-112571 | medium | 5.5 | No | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112575 | medium | 6.2 | No | The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, m... | 2026-11-04 |
| CVE-2026-112576 | medium | 6.5 | No | A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, i... | 2026-11-04 |
| CVE-2026-112593 | high | 7.7 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A... | 2026-11-04 |
| CVE-2026-112595 | high | 7.5 | No | This issue was addressed with improved authentication. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. A... | 2026-11-04 |
| CVE-2026-86969 | high | 7.5 | No | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadO... | 2026-11-04 |
| CVE-2026-86972 | high | 7.8 | No | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2... | 2026-11-04 |
| CVE-2026-86978 | low | 3.3 | No | This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app ma... | 2026-11-04 |
| CVE-2026-64789 | medium | 5.5 | No | This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, mac... | 2026-11-04 |
| CVE-2026-65368 | medium | 5.5 | No | A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2.... | 2026-11-04 |