CVE-2026-69494

CVE-2026-69494 is an out-of-bounds read vulnerability in the Windows Event Logging Service that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability requires user interaction (CVSS: UI:R) and no prior privileges (PR:N), yielding a CVSS 3.1 score of 8....

Microsoft SQL Server Security Feature Bypass Vulnerability

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...

Windows Event Logging Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

Windows Event Logging Service Remote Code Execution Vulnerability

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-86597

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

CVE-2026-86597 Sensitive information written to logs by Snowflake drivers

Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...

PT-2026-87515

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-66816: Insufficient Logging

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...

PT-2026-87219

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient logging allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the moment, there is no...

PT-2026-87517

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

PT-2026-88438

Name of the Vulnerable Software and Affected Versions Okta Hyperdrive Integration affected versions not specified Description The installer fails to mask the OAuth client secret when it is passed as an MSI property. This results in the credential being recorded in plaintext within the installer...

CVE-2026-69494: Out-of-bounds Read

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CISA: Logging Reference Architecture Updated

The Cybersecurity and Infrastructure Security Agency CISA developed the Logging Reference Architecture LRA in alignment with Office of Management and Budget Memorandum M-26-14: Ensuring Effective and Efficient Agency Logging and Network Visibility to Defend Against Evolving Cyber Threats, which w...

CVE-2026-69495: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

PT-2026-87290

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An issue exists where sensitive information is inserted into a log file within the Windows Program Compatibility Assistant Service. This allows an...

PT-2026-87516

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-69493: Out-of-bounds Read

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-80056

Dell Secure Connect Gateway (SCG) 5.0 is affected by an Insertion of Sensitive Information into Log File vulnerability. A low-privileged attacker with local access could potentially exploit this flaw, leading to information exposure (high confidentiality impact; no integrity or availability impac...

CVE-2026-82474

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...