Overview 10,342 matches · 817 in Waratek scope · 93 protected · 135 exploited · 45 CISA KEV · 999 public PoC · 158 EPSS ≥ 0.5
10,342matches
817in Waratek scope7.9%
93protected0.9%
135exploited1.3%
45CISA KEV0.4%
999public PoC9.7%
158EPSS ≥ 0.51.5%
Protected by Waratek
94
0.9%
Rule in development
1
0.0%
Mitigation candidate
29
0.3%
No exploit published
693
6.7%
Outside Waratek scope
631
6.1%
Not applicable
8,894
86.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
93
0.9%
partly blocked
1
0.0%
not blocked
10,248
99.1%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 1,366 / year
19966
Not applicable6
Medium6
not blocked6
Working exploit published3
No public exploit3
19979
Not applicable9
Medium9
not blocked9
Working exploit published4
No public exploit5
199815
Not applicable15
Medium15
not blocked15
Working exploit published5
No public exploit10
199969
Outside Waratek scope1
Not applicable68
Medium69
not blocked69
Working exploit published27
No public exploit42
200085
Mitigation candidate2
No exploit published2
Not applicable81
Medium85
not blocked85
Exploited1
Working exploit published41
No public exploit43
2001149
Mitigation candidate1
No exploit published2
Outside Waratek scope6
Not applicable140
Medium149
not blocked149
Exploited1
Working exploit published43
Forecast only2
No public exploit103
2002164
Mitigation candidate1
No exploit published9
Outside Waratek scope3
Not applicable151
Medium164
not blocked164
Exploited1
Working exploit published45
Forecast only3
No public exploit115
2003123
Mitigation candidate1
No exploit published11
Outside Waratek scope1
Not applicable110
Medium123
not blocked123
Working exploit published27
No public exploit96
2004208
Protected by Waratek1
Mitigation candidate1
No exploit published13
Outside Waratek scope3
Not applicable190
Medium208
blocked by ARMR today1
not blocked207
Exploited5
Working exploit published73
No public exploit130
2005227
Mitigation candidate2
No exploit published29
Outside Waratek scope5
Not applicable191
Medium227
not blocked227
Exploited4
Working exploit published57
Forecast only1
No public exploit165
2006230
Protected by Waratek1
Mitigation candidate1
No exploit published34
Outside Waratek scope2
Not applicable192
Medium230
blocked by ARMR today1
not blocked229
Working exploit published58
Forecast only1
No public exploit171
2007247
Protected by Waratek1
Mitigation candidate1
No exploit published35
Outside Waratek scope43
Not applicable167
Medium247
blocked by ARMR today1
not blocked246
Working exploit published55
No public exploit192
2008220
Mitigation candidate2
No exploit published27
Outside Waratek scope14
Not applicable177
Medium220
not blocked220
Working exploit published42
Proof of concept only1
Forecast only1
No public exploit176
2009248
Protected by Waratek1
Mitigation candidate2
No exploit published39
Outside Waratek scope22
Not applicable184
Medium248
blocked by ARMR today1
not blocked247
Exploited6
Working exploit published42
Forecast only1
No public exploit199
2010286
Protected by Waratek1
Mitigation candidate1
No exploit published23
Outside Waratek scope16
Not applicable245
Medium286
blocked by ARMR today1
not blocked285
Exploited3
Working exploit published39
No public exploit244
2011234
Protected by Waratek1
Mitigation candidate1
No exploit published25
Outside Waratek scope40
Not applicable167
Medium234
blocked by ARMR today1
not blocked233
Exploited2
Working exploit published23
Proof of concept only1
Forecast only1
No public exploit207
2012228
Protected by Waratek1
Mitigation candidate2
No exploit published20
Outside Waratek scope22
Not applicable183
Medium228
blocked by ARMR today1
not blocked227
Exploited3
Working exploit published27
Proof of concept only1
No public exploit197
2013219
Protected by Waratek1
No exploit published16
Outside Waratek scope16
Not applicable186
Medium219
blocked by ARMR today1
not blocked218
Exploited2
Working exploit published18
Forecast only3
No public exploit196
2014359
Protected by Waratek2
Mitigation candidate4
No exploit published20
Outside Waratek scope62
Not applicable271
Medium359
blocked by ARMR today2
not blocked357
Exploited2
Working exploit published16
Forecast only4
No public exploit337
2015324
Mitigation candidate1
No exploit published17
Outside Waratek scope44
Not applicable262
Medium324
not blocked324
Exploited5
Working exploit published12
Proof of concept only1
Forecast only2
No public exploit304
2016235
No exploit published21
Outside Waratek scope13
Not applicable201
Medium235
not blocked235
Exploited6
Working exploit published30
Proof of concept only2
Forecast only2
No public exploit195
2017468
Protected by Waratek9
No exploit published24
Outside Waratek scope33
Not applicable402
Medium468
blocked by ARMR today9
not blocked459
Exploited1
Working exploit published99
Proof of concept only1
No public exploit367
2018606
Protected by Waratek23
No exploit published36
Outside Waratek scope41
Not applicable506
Medium606
blocked by ARMR today23
not blocked583
Exploited16
Working exploit published37
Proof of concept only1
Forecast only1
No public exploit551
2019689
Protected by Waratek17
No exploit published34
Outside Waratek scope106
Not applicable532
Medium689
blocked by ARMR today16
partly blocked1
not blocked672
Exploited14
Working exploit published23
Proof of concept only4
Forecast only4
No public exploit644
2020693
Protected by Waratek9
Mitigation candidate1
No exploit published41
Outside Waratek scope43
Not applicable599
Medium693
blocked by ARMR today9
not blocked684
Exploited8
Working exploit published8
Proof of concept only7
Forecast only3
No public exploit667
2021473
Protected by Waratek9
Mitigation candidate1
No exploit published36
Outside Waratek scope17
Not applicable410
Medium473
blocked by ARMR today9
not blocked464
Exploited15
Working exploit published9
Proof of concept only15
Forecast only6
No public exploit428
2022452
Protected by Waratek5
No exploit published38
Outside Waratek scope36
Not applicable373
Medium452
blocked by ARMR today5
not blocked447
Exploited6
Working exploit published4
Proof of concept only32
Forecast only2
No public exploit408
2023472
Protected by Waratek1
No exploit published27
Outside Waratek scope25
Not applicable419
Medium472
blocked by ARMR today1
not blocked471
Exploited8
Working exploit published4
Proof of concept only24
Forecast only3
No public exploit433
2024483
Protected by Waratek4
Mitigation candidate1
No exploit published38
Outside Waratek scope13
Not applicable427
Medium483
blocked by ARMR today4
not blocked479
Exploited5
Working exploit published3
Proof of concept only19
Forecast only1
No public exploit455
2025755
Protected by Waratek3
Rule in development1
Mitigation candidate3
No exploit published35
Outside Waratek scope3
Not applicable710
Medium755
blocked by ARMR today3
not blocked752
Exploited13
Working exploit published8
Proof of concept only116
No public exploit618
20261,366
Protected by Waratek4
No exploit published41
Outside Waratek scope1
Not applicable1,320
Medium1,366
blocked by ARMR today4
not blocked1,362
Exploited8
Working exploit published3
Proof of concept only53
No public exploit1,302
19961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-118300 | Medium | 2026-11-10 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-120734 | Medium | 2026-11-03 | Not applicable | No public exploit | Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with access to the test action to obtain the stored SMTP password via a request that names an attacker-controlled SMTP host. |
| CVE-2026-120716 | Medium | 2026-11-03 | Not applicable | No public exploit | Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with the delegated permission to update users from the identity provider to obtain other users' MFA secrets via the synchronization API response. |
| CVE-2026-93850 | Medium | 2026-10-26 | Not applicable | No public exploit | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume of text extracted from an uploaded PDF which allows an authenticated user to exhaust server memory and cause a denial of service via a crafted PDF whose compressed content stream expands into a very large amount of text.. Mattermost Advisory ID: MMSA-2026-00769 |
| CVE-2026-93849 | Medium | 2026-10-26 | Not applicable | No public exploit | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply allocation limits to the byte-string decode paths in its WebSocket msgpack decoder, which allows an authenticated remote attacker to cause excessive server memory allocation via a crafted binary WebSocket frame declaring a Bin32 payload length of up to 4,294,967,295 bytes.. Mattermost Advisory ID: MMSA-2026-00768 |
| CVE-2026-13411 | Medium | 2026-10-22 | Not applicable | No public exploit | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709 |
| CVE-2026-114348 | Medium | 2026-10-22 | Not applicable | No public exploit | webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-editor endpoint validates the Host header with a regular expression meant for browser Origin schemes, so a Host value beginning with file: or with an extension scheme short-circuits the hostname and allowedHosts checks. A network peer that can reach the dev server can send a request with a malformed Host that passes validation and then causes the endpoint's URL construction to throw, and in the default non-production mode the server returns an HTTP 500 body containing the full exception stack trace, which discloses absolute filesystem paths, installed module locations, and internal source line numbers. The server keeps running, so there is no denial of service. The issue is fixed in webpack-dev-server 5.2.7 and 6.1.0, and users should upgrade to one of those versions or later. |
| CVE-2026-111761 | Medium | 2026-10-20 | No exploit published | Proof of concept only | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPushNotificationConfig without destination validation, scheme restrictions, or bounds on redirects. InMemoryPushNotificationConfigStore.setInfo stores the URL verbatim, and onCreateTaskPushNotificationConfig does not validate the destination. In the default deployment with push notifications enabled, an unauthenticated caller can register a destination through an inline SendMessage configuration or CreateTaskPushNotificationConfig for an existing task, causing task status and artifact updates to send requests from the server's network position to loopback, private, link-local cloud-metadata, IPv6 unique-local, unspecified, or multicast destinations where routing permits. JdkA2AHttpClient and VertxA2AHttpClient follow redirects, allowing a webhook redirect to bypass creation-time destination checks and convert a POST into a GET; hostname-only checks also do not prevent DNS rebinding. Direct POST delivery can push attacker-influenced task data into internal services, whereas a redirected POST-to-GET request drops the body. The sender discards the fetched response and does not expose delivery success or failure, so the demonstrated behavior does not provide response read-back. No credentials or user interaction are required. This issue is fixed in version 1.3.0.Final. |
| CVE-2026-101780 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101778 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101777 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster and unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H). |
| CVE-2026-101776 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101774 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster as well as unauthorized update, insert or delete access to some of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H). |
| CVE-2026-101762 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101761 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101760 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101756 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101755 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101754 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101753 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101752 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101751 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101750 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101749 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101748 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101747 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101743 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Cluster: 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101733 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101732 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101731 | Medium | 2026-10-20 | Not applicable | No public exploit | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). |
| CVE-2026-101515 | Medium | 2026-10-20 | No exploit published | No public exploit | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). |
| CVE-2026-19867 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to cap the number and size of mention keys stored in a user's notification properties, and to bound the quadratic multibyte-keyword matching performed for each post, which allows an authenticated user to degrade post-processing latency and consume excessive CPU on behalf of other members of any channel they share via storing an oversized notify_props.mention_keys list on their own profile.. Mattermost Advisory ID: MMSA-2026-00773 |
| CVE-2026-19621 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-deletion web socket events and returning thread API responses, which allows an authenticated channel member to obtain server-side webhook URLs and authentication context from interactive-message posts via the post_deleted websocket event or the threads REST API.. Mattermost Advisory ID: MMSA-2026-00766 |
| CVE-2026-19603 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize the active channel field returned by the user status API endpoints, which allows an authenticated user to learn the channel ID of a private channel another user is actively viewing via the status endpoints, without being a member of that channel. Mattermost Advisory ID: MMSA-2026-00765 |
| CVE-2026-19601 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings (such as the server address) are changed, which allows a System Console administrator to disclose the plaintext bind password to an attacker-controlled server via the Test Connection / diagnostics feature. Mattermost Advisory ID: MMSA-2026-00764 |
| CVE-2026-19600 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, which allows an attacker with access to server logs to obtain valid session tokens or OAuth access tokens and impersonate authenticated users via the debug-level Mattermost server log.. Mattermost Advisory ID: MMSA-2026-00763 |
| CVE-2026-19541 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth connection, which allows an authenticated user with permission to manage outgoing OAuth connections to obtain the secret via pointing the token URL at an attacker-controlled endpoint and triggering validation.. Mattermost Advisory ID: MMSA-2026-00761 |
| CVE-2026-19076 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to reject OAuth application sessions in the account type switch endpoint, which allows an attacker with a valid OAuth bearer token for a target user to permanently take over that user's SSO-backed account by setting an attacker-controlled password and detaching the account from its identity provider via a crafted request to POST /api/v4/users/login/switch.. Mattermost Advisory ID: MMSA-2026-00758 |
| CVE-2026-18799 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to restrict Slack import account binding to system administrator-initiated imports which allows an authenticated attacker with team admin privileges to force-add existing Mattermost users to their team and forge posts attributed to those users' identities via a crafted Slack export containing target users' email addresses.. Mattermost Advisory ID: MMSA-2026-00757 |
| CVE-2026-18795 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to enforce DM/GM check on server side which allows an authenticated user to quarantine a post belonging to DM or GM via direct API call.. Mattermost Advisory ID: MMSA-2026-00756 |
| CVE-2026-18560 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate user’s permissions before other validations which allows non-content reviewers to infer a post’s flagged status via direct API call.. Mattermost Advisory ID: MMSA-2026-00754 |
| CVE-2026-18551 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin via a crafted PUT request to the member roles API endpoint.. Mattermost Advisory ID: MMSA-2026-00752 |
| CVE-2026-18256 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to properly restrict private teams from public team search results, which allows an authenticated user without permission to list private teams to disclose the ID, name, and display name of private teams via a modified team search request. Mattermost Advisory ID: MMSA-2026-00748 |
| CVE-2026-18223 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the invited recipient's email address when redeeming team and guest invitation tokens, which allows an authenticated attacker to join a team or gain unauthorized access to private channels via a forwarded or leaked invitation link.. Mattermost Advisory ID: MMSA-2026-00747 |
| CVE-2026-16251 | Medium | 2026-10-16 | Not applicable | No public exploit | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to limit the size of remote image responses buffered in memory during local image proxy direct fetches, which allows a remote attacker to cause memory exhaustion on the server via a crafted oversized image response.. Mattermost Advisory ID: MMSA-2026-00726 |
| CVE-2026-110806 | Medium | 2026-10-16 | Not applicable | No public exploit | Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the unredacted add-on properties returned in connection data. |
| CVE-2026-110804 | Medium | 2026-10-16 | Not applicable | No public exploit | Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevated privileges via client-supplied JIT elevation settings in a checkout update request. |
| CVE-2026-110287 | Medium | 2026-10-16 | Not applicable | No public exploit | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to modify the asset contact password via a crafted direct request to the partial-save endpoint. |
| CVE-2026-97844 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97843 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97842 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97841 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97840 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97839 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97838 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97837 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97836 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97835 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97834 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97833 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97832 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97831 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97829 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97828 | Medium | 2026-10-13 | Not applicable | No public exploit | Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97827 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97826 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97825 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97824 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97823 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97822 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97821 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97820 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97819 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97817 | Medium | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97813 | Medium | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
| CVE-2026-97790 | Medium | 2026-10-13 | Not applicable | No public exploit | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally. |
| CVE-2026-97782 | Medium | 2026-10-13 | Not applicable | No public exploit | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. |
| CVE-2026-97779 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97760 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97740 | Medium | 2026-10-13 | Not applicable | No public exploit | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96948 | Medium | 2026-10-13 | Not applicable | No public exploit | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. |
| CVE-2026-96944 | Medium | 2026-10-13 | Not applicable | No public exploit | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. |
| CVE-2026-96938 | Medium | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96935 | Medium | 2026-10-13 | Not applicable | No public exploit | Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-96930 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-96927 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-96926 | Medium | 2026-10-13 | Not applicable | No public exploit | Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-96925 | Medium | 2026-10-13 | Not applicable | No public exploit | Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-96921 | Medium | 2026-10-13 | Not applicable | No public exploit | Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. |
| CVE-2026-96910 | Medium | 2026-10-13 | Not applicable | No public exploit | Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-96865 | Medium | 2026-10-13 | Not applicable | No public exploit | Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. |
| CVE-2026-96863 | Medium | 2026-10-13 | Not applicable | No public exploit | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-96860 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-96859 | Medium | 2026-10-13 | Not applicable | No public exploit | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
| CVE-2026-96858 | Medium | 2026-10-13 | Not applicable | No public exploit | Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. |
| CVE-2026-96857 | Medium | 2026-10-13 | Not applicable | No public exploit | Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. |
| CVE-2026-96855 | Medium | 2026-10-13 | Not applicable | No public exploit | Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-96854 | Medium | 2026-10-13 | Not applicable | No public exploit | Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. |
| CVE-2026-96853 | Medium | 2026-10-13 | Not applicable | No public exploit | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-96851 | Medium | 2026-10-13 | Not applicable | No public exploit | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |