CVE-2026-68834

A stack-based buffer overflow in Windows NTFS allows an authorized attacker to achieve privilege elevation over a network. The vulnerability is rated CVSS 8.0 (HIGH) with a vector of network access, low complexity, low privileges required, and user interaction required, resulting in high impact t...

EUVD-2026-73400

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-68831

CVE-2026-68831 is an information disclosure vulnerability in Windows Defender Firewall Service . The issue arises from files or directories accessible to external parties, allowing an authorized attacker with low privileges to disclose information locally (CVSS 3.1 score 5.5 – MEDIUM ; vector AV:...

EUVD-2026-73398

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally...

EUVD-2026-73399

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-68780

CVE-2026-68780 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N , reflecting high confidentiality impact with no ...

EUVD-2026-73396

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73395

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73392

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73391

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67648

Microsoft SQL Server is affected by a use of uninitialized resource vulnerability that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 base score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating high confidential...

CVE-2026-68775

Microsoft SQL Server is affected by a heap-based buffer overflow vulnerability that allows an authorized attacker (with low privileges) to achieve remote code execution over a network. The CVSS 3.1 base score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impa...

CVE-2026-67642

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The vulnerability is rated CVSS 3.1 8.8 (High) with high impact to confidentiality, integrity, and availability. CISA's ...

EUVD-2026-73388

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-67641

Microsoft SQL Server is affected by an integer overflow or wraparound vulnerability that allows an authorized attacker (low privileges) to trigger a denial of service over a network with low complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , with the primary impact on availa...

EUVD-2026-73387

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67393

CVE-2026-67393 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability is classified as information disclosure with a CVSS 3.1 base score of 6.5 (Medium) , requiring low privileges and no user interac...

EUVD-2026-73385

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-73386

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67390

CVE-2026-67390 is a buffer over-read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges required) to disclose information over a network with low attack complexity and no user interaction. The CVSS 3.1 score is 6.5 (Medium) , reflecting high confidentiality i...