6218 matches found
CVE-2026-67631
CVE-2026-67631 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized (low-privilege) attacker to achieve remote code execution over the network. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating hi...
CVE-2026-67630
CVE-2026-67630 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker to disclose information over a network . The CVSS 3.1 score is 6.5 (MEDIUM) , with low attack complexity, low privileges required, no user interaction, and high impact on confidentiali...
EUVD-2026-73183
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-67629
CVE-2026-67629 is an out-of-bounds read vulnerability in Microsoft SQL Server that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, reflecting high confidentiality impac...
CVE-2026-67370
CVE-2026-67370 is an SQL injection vulnerability in Microsoft SQL Server where improper neutralization of special elements used in a SQL command allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS v3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L...
EUVD-2026-73182
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-73181
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67373
This CVE describes a heap-based buffer overflow in Microsoft SQL Server that allows an authorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating low attack complexity and low privilege requirem...
EUVD-2026-73180
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-85360
A use after free flaw in the Windows Kernel allows a local, authenticated attacker to elevate privileges . The vulnerability is scored CVSS 3.1 7.0 (HIGH) with a local attack vector , high attack complexity , low privileges required , and no user interaction , resulting in high impact to confiden...
EUVD-2026-73173
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73166
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-62694
CVE-2026-62694 is a use-after-free vulnerability in Windows Installer that allows a locally authenticated attacker with low privileges to escalate privileges . The attack requires high complexity and no user interaction , with high impact on confidentiality, integrity, and availability (CVSS 3.1:...
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
Power Automate Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...
Windows DNS Server Remote Code Execution Vulnerability
Use after free in Windows DNS allows an authorized attacker to execute code over a network...
Graphics Kernel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally...
Windows Management Services Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...