CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

CVE-2026-110170

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

GHSA-MF4X-W4GH-4656 Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An unauthenticated...

EUVD-2026-100616

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88089

A heap-based buffer overflow exists in Microsoft SQL Server , which could allow an authorized attacker to execute code locally . This vulnerability is associated with several security updates, including KB5126967 (SQL Server 2025 CU9), KB5128495 (SQL Server 2019 GDR), KB5128496 (SQL Server 2017 C...

CVE-2026-88088

An integer overflow or wraparound vulnerability in Microsoft SQL Server allows an authorized attacker to achieve local privilege escalation . Microsoft has released updates to address this vulnerability, which may be mitigated by installing the security updates provided in KB5126967 (SQL Server 2...

EUVD-2026-100615

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100618

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

EUVD-2026-100617

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88082

A heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally . The vulnerability could potentially allow malicious actors to gain excessive privileges, execute arbitrary code, and access sensitive data. Microsoft has released updates to address these issu...

EUVD-2026-100609

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100608

Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-100606

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-70189

A heap-based buffer overflow exists in Microsoft SQL Server , which could allow an authorized attacker to execute code locally. This vulnerability could potentially lead to a denial-of-service attack, privilege escalation, arbitrary code execution, or unauthorized access to sensitive data. Remedi...

EUVD-2026-100712

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-93905 IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...

CVE-2026-93905

IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are vulnerable to a deserialization of untrusted data (CWE-502) when the batchManagement-1.0 feature is enabled. This vulnerability could allow an unauthenticated remote attacker to corrupt the persisted status of batch ...

CVE-2026-93895

IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 are vulnerable to an Improper Access Control flaw (CWE-284 ). When the grpc-1.0 feature is enabled, an unauthenticated remote attacker can bypass access controls configured on gRPC service methods . This vulnerability...

CVE-2026-63161

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...

CVE-2026-103847

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to...