CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-09-09 (74)

2026-09-09 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-09-09

74 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2026-26084 — 9.9 — A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 throu…
  • CVE-2026-68839 — 9.8 — Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69408 — 9.8 — Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69463 — 9.8 — Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69491 — 9.8 — Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69493 — 9.8 — Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69496 — 9.8 — Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69525 — 9.8 — Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69579 — 9.8 — Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69586 — 9.8 — Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69590 — 9.8 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
  • CVE-2026-69595 — 9.8 — Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69715 — 9.8 — Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69730 — 9.8 — Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69768 — 9.8 — Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69769 — 9.8 — Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69829 — 9.8 — Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69845 — 9.8 — Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
  • CVE-2026-69910 — 9.8 — Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
  • CVE-2026-70296 — 9.8 — Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
  • CVE-2026-72950 — 9.8 — Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
  • CVE-2026-72979 — 9.8 — Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
  • CVE-2026-72982 — 9.8 — Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
  • CVE-2026-72983 — 9.8 — Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
  • CVE-2026-73009 — 9.8 — Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
  • CVE-2026-73010 — 9.8 — Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
  • CVE-2026-73025 — 9.8 — Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
  • CVE-2026-78445 — 9.8 — Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
  • CVE-2026-78509 — 9.8 — Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
  • CVE-2026-87534 — 9.8 — Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium s…
  • CVE-2026-87544 — 9.8 — Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Lo…
  • CVE-2026-87595 — 9.8 — Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security sever…
  • CVE-2026-41871 — 9.8 — Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through 1.22. Us…
  • CVE-2026-56207 — 9.8 — Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: >=4.0.0. Users are…
  • CVE-2026-85102 — 9.8 — Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary code on the Gateway. [KEV]
  • CVE-2026-85103 — 9.8 — A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
  • CVE-2026-87438 — 9.6 — Out of bounds write in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
  • CVE-2026-87448 — 9.6 — Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
  • CVE-2026-87455 — 9.6 — Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
  • CVE-2026-87464 — 9.6 — Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
  • CVE-2026-87470 — 9.6 — Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security sever…
  • CVE-2026-87474 — 9.6 — Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87488 — 9.6 — Use after free in WebGL in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
  • CVE-2026-87492 — 9.6 — Incorrect authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87494 — 9.6 — Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium sec…
  • CVE-2026-87500 — 9.6 — Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity…
  • CVE-2026-87504 — 9.6 — Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security seve…
  • CVE-2026-87512 — 9.6 — Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87520 — 9.6 — Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87526 — 9.6 — Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security…
  • CVE-2026-87527 — 9.6 — Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
  • CVE-2026-87528 — 9.6 — Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Mediu…
  • CVE-2026-87529 — 9.6 — Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
  • CVE-2026-87547 — 9.6 — Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML pa…
  • CVE-2026-87558 — 9.6 — Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87581 — 9.6 — Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu…
  • CVE-2026-87607 — 9.6 — Use after free in Device in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87609 — 9.6 — Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
  • CVE-2026-87621 — 9.6 — Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity:…
  • CVE-2026-87634 — 9.6 — Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
  • CVE-2026-87637 — 9.6 — Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
  • CVE-2026-87638 — 9.6 — Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
  • CVE-2026-87643 — 9.6 — Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medi…
  • CVE-2026-87646 — 9.6 — Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87650 — 9.6 — Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-87654 — 9.6 — Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
  • CVE-2026-86751 — 9.6 — Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image …
  • CVE-2026-78997 — 9.3 — UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An att…
  • CVE-2026-69356 — 9.3 — Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
  • CVE-2026-75156 — 9.1 — Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD id_tokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure…
  • CVE-2026-69641 — 9.1 — Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
  • CVE-2026-41869 — 9.1 — Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to v…
  • CVE-2026-87613 — 9.0 — Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security sev…
  • CVE-2026-87491 — 0.0 — Google Chromium V8 contains an out of bounds write vulnerability that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers t… [KEV]

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.