Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Windows DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

Windows DCOM Server Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

Windows SMB Server Elevation of Privilege Vulnerability

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

Windows UI Immersive Server API Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally...

Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Windows Clipboard Server Elevation of Privilege Vulnerability

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...

SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-93907 IBM WebSphere Application Server is affected by a bypass authentication vulnerability

IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler...

CVE-2026-93907

IBM WebSphere Application Server versions 8.5 and 9.0 are affected by a vulnerability that allows a remote attacker to bypass authentication. The root cause is a flaw in the CSIv2 inbound propagation handler (CWE-287: Improper Authentication). Successful exploitation can lead to high impacts on c...

CVE-2026-95680

IBM WebSphere Application Server versions 8.5 and 9.0 are affected by an improper authentication vulnerability (CWE-287 ). This flaw could allow an authenticated attacker to bypass authorization, potentially leading to administrative impersonation across the cell. To remediate this, IBM recommend...

CVE-2026-95680 IBM WebSphere Application Server is affected by an authorization bypass

IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell...

CVE-2026-103499 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption...

CVE-2026-103499

IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service (DoS) attack due to uncontrolled resource consumption (CWE-400). This flaw allows a remote, unauthenticated attacker to exhaust system resources. Affected Products and Versions: WebSphe...

Security Bulletin: IBM WebSphere Application Server is affected by a bypass authentication vulnerability (CVE-2026-93907)

Summary IBM WebSphere Application Server is affected by a bypass authentication vulnerability. Vulnerability Details CVEID:CVE-2026-93907 DESCRIPTION: IBM WebSphere Application Server could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation...

CVE-2026-109954 Parse Server 9.0.0 before 9.10.2-alpha.5 Transactional Batch Request Write Interference

Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request interfere with other clients' database writes. On PostgreSQL or MongoDB replica sets and sharded clusters, other clients'...