CVE-2026-68775

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67629

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67630

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67636

Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67389

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67379

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67381

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67383

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67380

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-67384

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-66818

Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-66819

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67369

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67373

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-65812

Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-62810

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-62762

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-62697

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-56172

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83501

CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that allows a local, authorized attacker (low privileges) to disclose information without user interaction. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no int...