PT-2026-88762

The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm contact dropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This mak...

CVE-2026-13359: Improper Neutralization of Input During Web Page Generation

The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrmcontactdropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes...

Vulnerabilities in SQL Server

Microsoft has identified 62 vulnerabilities in various components of SQL Server. Malicious actors could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the table below. CVE-2026-67643 | 8.80 | Execution of arbitrary code | CVE-2026-67645 | 6.50 | Access to...

CVE-2026-78442

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

CVE-2026-78441

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...

CVE-2026-72933

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...

EUVD-2026-73796

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...

CVE-2026-78441

CVE-2026-78441 is an out-of-bounds read vulnerability in Windows OLE DB that allows an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N — indicating network reachability, low complexity, no priv...

CVE-2026-78442

CVE-2026-78442 is a heap-based buffer overflow in Windows OLE DB that allows an unauthorized attacker to achieve remote code execution over a network with user interaction. The CNA-assigned CVSS 3.1 score is 8.8 (High) with full impact on confidentiality, integrity, and availability. CISA's SSVC ...

EUVD-2026-73795

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

EUVD-2026-73665

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...

CVE-2026-72933

CVE-2026-72933 is a heap-based buffer overflow in the Microsoft WDAC (Windows Defender Application Control) OLE DB provider for SQL , allowing an unauthorized remote attacker to achieve code execution over a network . The vulnerability is rated CVSS 3.1 8.8 (HIGH) by Microsoft (CNA), with the vec...

Windows OLE DB Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

Azure Cosmos DB Spoofing Vulnerability

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...

Windows OLE DB Information Disclosure Vulnerability

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...

Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...

CVE-2026-78441: Out-of-bounds Read

Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...

CVE-2026-78442: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

PT-2026-87987

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...

CVE-2026-72933: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...