Skip to content
OpenAdvisories

Archive

13 October 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-83681 Public exploit

    Microsoft PowerToys Tampering Vulnerability

    Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.

  • Medium 5.4
    CVE-2026-109721 Public exploit

    Incorrect boundary conditions in the JavaScript Engine: JIT component

    Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  • Medium 5.4
    CVE-2026-104587 Public exploit

    blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses t…