CVE-2026-67628: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-88121: Use After Free

Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...

CVE-2026-83516: Out-of-bounds Read

Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

CVE-2026-97334: Improper Handling of Highly Compressed Data (Data Amplification)

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...

CVE-2026-97781: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

CVE-2026-83674: Weak Authentication

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-105599: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

CVE-2026-85922: Weak Authentication

Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network...

KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)

The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

CVE-2026-70183: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

CVE-2026-70186: Deadlock

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70196: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-96233: Out-of-bounds Write

Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-96960: Asymmetric Resource Consumption (Amplification)

Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...

Microsoft ASP.NET: CVE-2026-70183: ASP.NET Core Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

Microsoft ASP.NET: CVE-2026-70196: ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Microsoft .NET: CVE-2026-66822: .NET Information Disclosure Vulnerability

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

Microsoft .NET: CVE-2026-96229: .NET Information Disclosure Vulnerability

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...

Microsoft .NET: CVE-2026-96237: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

Microsoft .NET: CVE-2026-96238: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...