CVE-2026-88085

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88084

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-88082

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85919

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85876

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70189

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

RHLW-2026-2D8697B26CCD16C3 Lightwell Security Advisory: cxf-rt-rs-security-oauth2 4.2.2.rhlw-00006

Red Hat Lightwell has released org.apache.cxf:cxf-rt-rs-security-oauth2 4.2.2.rhlw-00006 with backported fixes for CVE-2026-57818, CVE-2026-63687, CVE-2026-68079, and CVE-2026-68481. CVE-2026-57818: Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider CVE-2026-63687:...

CVE-2026-110141

Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-110144

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110159

Google Chrome versions prior to 155.0.8059.79 are vulnerable to an incorrect authorization flaw in the Updater component. A local attacker can exploit this flaw to execute arbitrary code outside the sandbox via a local program. Remediation is provided in the 155.0.8059.79 update for Windows, Mac,...

CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

CVE-2026-110170

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unauthenticated...

GHSA-MF4X-W4GH-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unauthenticated...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...