6105 matches found
EUVD-2026-73822
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-66819
CVE-2026-66819 is an SQL injection vulnerability in Microsoft SQL Server , caused by improper neutralization of special elements used in SQL commands. An authorized attacker can exploit it over a network to elevate privileges , with a CVSS 3.1 score of 8.8 (HIGH) and impacts rated High for confid...
EUVD-2026-73814
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67369
CVE-2026-67369 is an out-of-bounds read in Microsoft SQL Server that allows an authorized attacker to disclose information over a network. The vulnerability requires low privileges and has a CVSS 3.1 score of 6.5 (MEDIUM) with high confidentiality impact but no integrity or availability impact. C...
EUVD-2026-73815
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-78456
CVE-2026-78456 affects Microsoft SQL Server and is caused by a heap-based buffer overflow that allows an authorized attacker (low privileges required) to achieve remote code execution over the network. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflect...
EUVD-2026-73809
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-78454
An out-of-bounds read in the Windows CD-ROM Driver allows a local, low-privilege attacker to achieve information disclosure . The CVSS 3.1 score is 5.5 (Medium) , reflecting a local attack vector, low complexity, and high confidentiality impact with no integrity or availability impact. CISA's SSV...
CVE-2026-78448
CVE-2026-78448 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting that a low-privileged local attacker can compro...
CVE-2026-78447
CVE-2026-78447 is a heap-based buffer overflow in the Windows Biometric Service component, which allows an authorized local attacker to achieve privilege escalation . Microsoft rates the vulnerability as HIGH severity with a CVSS v3.1 score of 7.8 (vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), in...
EUVD-2026-73803
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-78446
CVE-2026-78446 is a use-after-free vulnerability in Windows Distributed File System (DFS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 5.3 (Medium) , reflecting a network attack vector with high complexity , low privileges required , and no...
EUVD-2026-73798
Use after free in Windows Distributed File System DFS allows an authorized attacker to deny service over a network...
EUVD-2026-73787
Use after free in SQL Server allows an authorized attacker to elevate privileges locally...
CVE-2026-77485
CVE-2026-77485 is a use-after-free vulnerability in Microsoft SQL Server that allows an authorized attacker to elevate privileges locally . The flaw requires local access and low privileges, with high attack complexity and no user interaction, scoring CVSS 3.1 7.0 (HIGH) with full impact on confi...
EUVD-2026-73786
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-77484
CVE-2026-77484 is a remote code execution vulnerability in Microsoft SQL Server caused by deserialization of untrusted data , allowing an authorized attacker to execute code over a network. The CVSS v3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network-explo...
EUVD-2026-73785
Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-77483
CVE-2026-77483 affects Microsoft SQL Server and involves a weak authentication mechanism that allows an authorized attacker (low privileges required) to elevate privileges over a network . The CVSS 3.1 score is 8.8 (HIGH) with vectors for network attack, low complexity, no user interaction, and h...