Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-112494 | medium | 5.5 | No | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An app may... | 2026-11-04 |
| CVE-2026-112485 | high | 7.8 | No | The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoi... | 2026-11-04 |
| CVE-2026-112482 | high | 8.1 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.... | 2026-11-04 |
| CVE-2026-112470 | high | 7.8 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-112466 | high | 7.1 | No | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS... | 2026-11-04 |
| CVE-2026-112116 | not reported | — | No | An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arb... | 2026-11-04 |
| CVE-2026-110464 | not reported | — | No | Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local Sy... | 2026-11-04 |
| CVE-2026-112355 | high | 7.5 | No | The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows unauthenticated attackers... | 2026-11-04 |
| CVE-2026-112441 | low | 3.3 | No | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 2... | 2026-11-04 |
| CVE-2026-112416 | medium | 5.5 | No | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and... | 2026-11-04 |
| CVE-2026-106554 | not reported | — | No | One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time TagList growth (CPU/... | 2026-11-04 |
| CVE-2026-105296 | medium | 5.4 | No | Multiple Akeeba products lack the anti-CSRF check on some actions. If the user access a malicious page while logged into the product, uninte... | 2026-11-04 |
| CVE-2026-107176 | medium | 6.8 | No | A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, an... | 2026-11-04 |
| CVE-2026-104799 | high | 8.8 | No | The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the `wcfmmp_pr... | 2026-11-04 |
| CVE-2026-100302 | not reported | — | No | Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash... | 2026-11-04 |
| CVE-2026-100300 | not reported | — | No | Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper... | 2026-11-04 |
| CVE-2026-116252 | medium | 6.5 | No | pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged. libpq treats a --dbname value... | 2026-11-04 |
| CVE-2026-116251 | medium | 5.4 | No | pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own change password dialog or... | 2026-11-04 |
| CVE-2026-90631 | low | 3.3 | No | Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an attacker to craft a doc... | 2026-11-04 |
| CVE-2026-90632 | medium | 5.5 | No | Apache OpenOffice documents can include multimedia content (audio, video, etc.) A crafted document could exploit the GStreamer multimedia c... | 2026-11-04 |