CVE-2026-87697 high dotnet: dotnet: arbitrary code execution via untrusted data deserialization since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-86063 high claude-code: Claude Code: arbitrary code execution via unverified commit hash during plugin installation since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-85363 high dotnet: dotnet: Privilege escalation via integer overflow since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-84994 high Qwik: Crashing any Qwik Server via Resource thenable since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-84008 high dotnet: .NET Denial of Service Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-83520 high dotnet: dotnet: Arbitrary code execution via untrusted data deserialization since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70197 high dotnet: dotnet: Arbitrary code execution via out-of-bounds write since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70190 high dotnet: dotnet: Privilege escalation via improper link resolution since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70186 high dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Denial of Service Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70183 high dotnet: dotnet10.0: dotnet9.0: dotnet8.0: ASP.NET Core Elevation of Privilege Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70181 high dotnet9.0: dotnet8.0: dotnet10.0: ASP.NET Core Denial of Service Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70179 high dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70175 high dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70174 high dotnet: .NET Remote Code Execution Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70161 high dotnet: dotnet: Privilege escalation via path traversal since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70159 high dotnet8.0: dotnet10.0: dotnet: dotnet9.0: ASP.NET Core Denial of Service Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70035 high dotnet: dotnet: arbitrary code execution via untrusted data deserialization since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-70007 high dotnet: .NET Framework Remote Code Execution Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-69651 high dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-58280 high dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-110247 high thunderbird: thunderbird: Arbitrary code execution via integer overflow in libmime since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-110220 high github.com/kubeflow/hub: Kubeflow Model Registry: Privilege escalation via Server-Side Request Forgery in InferenceService annotation since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-108398 high dotnet: .NET Framework: Security feature bypass via untrusted search path since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-102870 high dotnet: dotnet10.0: ASP.NET Core Remote Code Execution Vulnerability since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-102869 high dotnet: .NET and Visual Studio: Privilege escalation via type confusion since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-102599 high engine.io: engine.io: Denial of Service via protocol revision mismatch during transport upgrade since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-94603 high podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-85990 high Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-82416 high FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-77459 high argo-cd: github.com/argoproj/argo-cd/v3: github.com/argoproj/argo-cd/v2: argo-cd: AppProject restrictions bypassed by PreDelete/PostDelete resource hooks since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-61642 high squid: squid: Request Smuggling in HTTP Transfer-Encoding since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-54641 high OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-54640 high OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-103030 high Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter` since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-79610 high xen: Xen: Host privilege escalation via stale grant table pointers since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-95114 high libwebsockets: libwebsockets: Denial of Service via out-of-bounds read in LEJP parser since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109954 high Parse Server 9.0.0 before 9.10.2 Transactional Batch Request Write Interference since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109740 high firefox: firefox: Sandbox escape via incorrect boundary conditions in Win32 widget since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109732 high firefox: Use-after-free in the DOM: Streams component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109729 high firefox: Use-after-free in the JavaScript Engine: JIT component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109727 high firefox: Use-after-free in the Audio/Video component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109726 high firefox: Use-after-free in the SVG component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109719 high firefox: Race condition, use-after-free in the Graphics: CanvasWebGL component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109717 high firefox: Use-after-free in the DOM: Bindings (WebIDL) component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109714 high firefox: Incorrect boundary conditions in the Layout component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109710 high firefox: thunderbird: Use-after-free in the Graphics: Text component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109707 high firefox: Sandbox escape due to use-after-free in the Networking component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109706 high firefox: Use-after-free in the Storage: IndexedDB component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109705 high firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 CVE-2026-109832 high gnome-remote-desktop: Busy-Wait DoS in VNC TLS I/O Handlers (GNUTLS_E_AGAIN / GNUTLS_E_INTERRUPTED) since at least 24 Oct 2026 07:11 UTC build 13 Oct 2026 