EUVD-2026-100606

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

EUVD-2026-100605

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-100607

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-65674

A deserialization of untrusted data vulnerability exists in Microsoft SQL Server , which allows an authorized attacker to execute arbitrary code over a network. While specific affected versions are not detailed in the description, Microsoft has released security updates to address this issue. Use...

CVE-2026-70189

A heap-based buffer overflow exists in Microsoft SQL Server , which could allow an authorized attacker to execute code locally. This vulnerability could potentially lead to a denial-of-service attack, privilege escalation, arbitrary code execution, or unauthorized access to sensitive data. Remedi...

EUVD-2026-100711

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

EUVD-2026-100712

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-100604

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-83945

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to execute arbitrary code over a network. This vulnerability could lead to a denial-of-service attack, privilege escalation, or unauthorized access to sensitive data. Microsoft has released updates to...

CVE-2026-85876

A Use after free vulnerability in Microsoft SQL Server allows an authorized attacker to elevate privileges locally . Microsoft has released security updates to address this issue, which can be found in various Knowledge Base articles including KB5128495 (SQL Server 2019 GDR), KB5126967 (SQL Serve...

EUVD-2026-100709

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-68883

A heap-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. This vulnerability could allow malicious actors to cause a denial-of-service attack, gain excessive privileges, execute arbitrary code, and potentially access sensitive data. M...

CVE-2026-85886

A heap-based buffer overflow in SQL Server allows an authorized attacker to achieve remote code execution over a network. This vulnerability could lead to a denial-of-service attack, excessive privilege gain, and unauthorized access to sensitive data. Microsoft has released security updates to ad...

EUVD-2026-100710

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-67625

A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to execute arbitrary code over a network. The vulnerability could also lead to a denial-of-service attack, excessive privilege gain, and unauthorized access to sensitive data. Microsoft has released u...

EUVD-2026-100708

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-96956

A stack-based buffer overflow in Microsoft SQL Server allows an authorized attacker to elevate privileges over a network. While the provided documents do not specify the exact component or file involved, the vulnerability could lead to arbitrary code execution, denial-of-service, or unauthorized ...

EUVD-2026-100707

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-63154

Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-controlled agoraFields names as unvalidated SQL column identifiers during the user import flow. Attackers can inject privileged...

CVE-2026-110083

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized...