Daily High-Risk Vuln Digest 2026-10-14 (59)
Daily High-Risk Vulnerability Digest · 2026-10-14
59 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).
今日收录
- CVE-2026-97229 —
10.0— GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to exec… - CVE-2026-65162 —
10.0— NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit… - CVE-2026-55675 —
10.0— The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the… - CVE-2026-106042 —
9.9— An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and ob… - CVE-2026-109412 —
9.9— An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information. - CVE-2026-77459 —
9.9— Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and … - CVE-2026-97381 —
9.9— Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After success… - CVE-2026-106173 —
9.8— A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets. - CVE-2026-100202 —
9.8— Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. - CVE-2026-102210 —
9.8— Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. - CVE-2026-105010 —
9.8— Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. - CVE-2026-69634 —
9.8— Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. - CVE-2026-69639 —
9.8— Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. - CVE-2026-69705 —
9.8— Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. - CVE-2026-69883 —
9.8— Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. - CVE-2026-69886 —
9.8— Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. - CVE-2026-70024 —
9.8— Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. - CVE-2026-70096 —
9.8— Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. - CVE-2026-70157 —
9.8— Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. - CVE-2026-70242 —
9.8— Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. - CVE-2026-70291 —
9.8— Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. - CVE-2026-70300 —
9.8— Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. - CVE-2026-83517 —
9.8— Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. - CVE-2026-83519 —
9.8— Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. - CVE-2026-83578 —
9.8— Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. - CVE-2026-83693 —
9.8— Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. - CVE-2026-83748 —
9.8— Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. - CVE-2026-83770 —
9.8— Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. - CVE-2026-83780 —
9.8— Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network. - CVE-2026-83782 —
9.8— Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. - CVE-2026-83862 —
9.8— Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network. - CVE-2026-85792 —
9.8— Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine - CVE-2026-85809 —
9.8— Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine - CVE-2026-85814 —
9.8— Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. - CVE-2026-85928 —
9.8— Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. - CVE-2026-88102 —
9.8— Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. - CVE-2026-88156 —
9.8— Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. - CVE-2026-88178 —
9.8— Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. - CVE-2026-96096 —
9.8— Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. - CVE-2026-96219 —
9.8— Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. - CVE-2026-96320 —
9.8— Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. - CVE-2026-96909 —
9.8— Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. - CVE-2026-96924 —
9.8— Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. - CVE-2026-96934 —
9.8— Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. - CVE-2026-97016 —
9.8— Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. - CVE-2026-97749 —
9.8— Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. - CVE-2026-97805 —
9.8— Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. - CVE-2026-97814 —
9.8— Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. - CVE-2026-97815 —
9.8— Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. - CVE-2026-97816 —
9.8— Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. - CVE-2026-109705 —
9.6— Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.… - CVE-2026-109707 —
9.6— Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. - CVE-2026-70279 —
9.3— Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. - CVE-2026-65173 —
9.1— NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead … - CVE-2026-55695 —
9.1— FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php… - CVE-2026-110116 —
9.1— Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send cra… - CVE-2026-105008 —
9.0— No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. - CVE-2026-85818 —
9.0— Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. - CVE-2026-96951 —
8.8— Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. [KEV]
Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.