CVE-2026-88085

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88089

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-88082

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85919

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85876

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-78628

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

CVE-2026-78632

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES...

CVE-2026-70189

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-62840

Time-of-check time-of-use toctou race condition in Linux Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-104587

blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting XSS vulnerability. The application uses text/template instead of html/template, failing to perform context-aware auto-escaping on the URL and DisplayURL fields of bookmarks in internal/webui/templates/bookmarks.html. An...

CVE-2026-110159

Google Chrome versions prior to 155.0.8059.79 are vulnerable to an incorrect authorization flaw in the Updater component. A local attacker can exploit this flaw to execute arbitrary code outside the sandbox via a local program. Remediation is provided in the 155.0.8059.79 update for Windows, Mac,...

CVE-2026-110144

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110159

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110159

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110144

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110159

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110144

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110150

A privilege elevation flaw exists in the Installer component of Google Chrome on Windows versions prior to 155.0.8059.79 . This vulnerability allows a local attacker to obtain sensitive information by executing a local program. The issue has a High security severity in Chromium. Remediation is av...

CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...

CVE-2026-110150

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. Chromium security severity: High...