EUVD-2026-73814

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73815

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73809

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-78456

CVE-2026-78456 affects Microsoft SQL Server and is caused by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflect...

CVE-2026-78454

An out-of-bounds read in the Windows CD-ROM Driver allows a local, low-privilege attacker to achieve information disclosure . The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, and high confidentiality impact with no integrity or availability impact. CISA's SSV...

CVE-2026-78448

CVE-2026-78448 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting that a low-privileged local attacker can compro...

EUVD-2026-73803

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73798

Use after free in Windows Distributed File System DFS allows an authorized attacker to deny service over a network...

CVE-2026-78446

CVE-2026-78446 is a use-after-free vulnerability in Windows Distributed File System (DFS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 5.3 (Medium) , reflecting a network attack vector with high complexity , low privileges required , and no...

EUVD-2026-73787

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-77485

CVE-2026-77485 is a use-after-free vulnerability in Microsoft SQL Server that allows an authorized attacker to elevate privileges locally . The flaw requires local access and low privileges, with high attack complexity and no user interaction, scoring CVSS 3.1 7.0 (HIGH) with full impact on confi...

EUVD-2026-73786

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77484

CVE-2026-77484 is a remote code execution vulnerability in Microsoft SQL Server caused by deserialization of untrusted data , allowing an authorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-explo...

EUVD-2026-73785

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-77483

CVE-2026-77483 affects Microsoft SQL Server and involves a weak authentication mechanism that allows an authorized attacker (low privileges required) to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) with vectors for network attack, low complexity, no user interaction, and h...

CVE-2026-77480

SQL Server is affected by an elevation of privilege vulnerability caused by insufficient granularity of access control . An authorized attacker with low privileges can exploit the flaw over a network to elevate their access, resulting in high impact to confidentiality, integrity, and availability...

CVE-2026-73028

Microsoft SQL Server is affected by an improper access control vulnerability (CVE-2026-73028) that allows an authorized attacker to elevate privileges over a network . The vulnerability is rated HIGH severity with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low ...

EUVD-2026-73782

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73780

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally...

CVE-2026-73017

CVE-2026-73017 is a heap-based buffer overflow in Windows Graphics Kernel that allows a local, authorized attacker to achieve code execution . The vulnerability requires high privileges and high attack complexity , with no user interaction needed. Scope is changed, with high impact on confidentia...