CVE-2026-67378

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67380

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67384

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-66818

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67370

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66820

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66819

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67373

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67369

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-65812

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-65772

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-62813

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-62810

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-62762

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-62697

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-56172

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-56198

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-83501

CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that allows a local, authorized attacker (low privileges) to disclose information without user interaction. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no int...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

CVE-2026-84000

CVE-2026-84000 is a heap-based buffer overflow in Microsoft Graphics Component that allows an authorized attacker to execute code locally. The vulnerability requires local access and low privileges but no user interaction, resulting in high impact to confidentiality, integrity, and availability (...