EUVD-2026-100617

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100616

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100615

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88089

A heap-based buffer overflow exists in Microsoft SQL Server , which could allow an authorized attacker to execute code locally . This vulnerability is associated with several security updates, including KB5126967 (SQL Server 2025 CU9), KB5128495 (SQL Server 2019 GDR), KB5128496 (SQL Server 2017 C...

CVE-2026-88088

An integer overflow or wraparound vulnerability in Microsoft SQL Server allows an authorized attacker to achieve local privilege escalation . Microsoft has released updates to address this vulnerability, which may be mitigated by installing the security updates provided in KB5126967 (SQL Server 2...

EUVD-2026-100609

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88082

A heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally . The vulnerability could potentially allow malicious actors to gain excessive privileges, execute arbitrary code, and access sensitive data. Microsoft has released updates to address these issu...

EUVD-2026-100608

Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-100606

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-70189

A heap-based buffer overflow exists in Microsoft SQL Server , which could allow an authorized attacker to execute code locally. This vulnerability could potentially lead to a denial-of-service attack, privilege escalation, arbitrary code execution, or unauthorized access to sensitive data. Remedi...

EUVD-2026-100712

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-93905 IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...

CVE-2026-93905

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are vulnerable to a deserialization of untrusted data (CWE-502) when the batchManagement-1.0 feature is enabled. This vulnerability could allow an unauthenticated remote attacker to corrupt the persisted status of batch ...

CVE-2026-93905 IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...

CVE-2026-93895

IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 are vulnerable to an Improper Access Control flaw (CWE-284 ). When the grpc-1.0 feature is enabled, an unauthenticated remote attacker can bypass access controls configured on gRPC service methods . This vulnerability...

EUVD-2026-100496

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization...

CVE-2026-63161

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...

CVE-2026-103847

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to...

CVE-2026-103845

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-79715

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 are vulnerable to a path traversal vulnerability (CWE-22 ). A local attacker can use a specially crafted application archive to traverse directories and write files outside the intended directory. This issue also affect...