Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-61840 | not reported | — | No | Quest Bot is an opensource Discord Bot. Prior to 1.1.9, the `image to GIF` command uses a request helper that validates a hostname's public... | 2026-10-30 |
| CVE-2026-48201 | high | 7.1 | No | Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions. | 2026-10-30 |
| CVE-2026-118086 | high | 8.8 | No | Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. | 2026-10-30 |
| CVE-2026-116852 | critical | 9.1 | No | Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. | 2026-10-30 |
| CVE-2026-116401 | high | 7.5 | No | Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. | 2026-10-30 |
| CVE-2026-107868 | medium | 5.3 | No | Unauthenticated Bypass Vulnerability in YITH WooCommerce Product Add-Ons <= 4.34.0 versions. | 2026-10-30 |
| CVE-2026-81396 | high | 7.8 | No | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | 2026-10-30 |
| CVE-2026-78524 | high | 8.8 | No | Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network. | 2026-10-30 |
| CVE-2026-77911 | medium | 6.5 | No | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. | 2026-10-30 |
| CVE-2026-77491 | medium | 5.5 | No | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally. | 2026-10-30 |
| CVE-2026-71328 | high | 8.8 | No | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 2026-10-30 |
| CVE-2026-70125 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. | 2026-10-30 |
| CVE-2026-69806 | high | 7.0 | No | Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. | 2026-10-30 |
| CVE-2026-69767 | high | 8.8 | No | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | 2026-10-30 |
| CVE-2026-69556 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | 2026-10-30 |
| CVE-2026-69522 | high | 8.8 | No | Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. | 2026-10-30 |
| CVE-2026-69439 | high | 8.8 | No | Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. | 2026-10-30 |
| CVE-2026-69304 | medium | 5.9 | No | Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a netw... | 2026-10-30 |
| CVE-2026-64918 | medium | 6.5 | No | Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. | 2026-10-30 |
| CVE-2026-62804 | high | 7.8 | No | External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 2026-10-30 |