6279 matches found
CVE-2026-66819
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-66820
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67369
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2026-65812
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...
CVE-2026-65772
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
CVE-2026-62813
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...
CVE-2026-62810
Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-62762
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...
CVE-2026-62697
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-56198
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...
CVE-2026-56172
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83501
CVE-2026-83501 is an out-of-bounds read vulnerability in Windows Virtualization-Based Security (VBS) Enclave that allows a local, authorized attacker (low privileges) to disclose information without user interaction. The CVSS 3.1 score is 5.5 (Medium) , with high confidentiality impact but no int...
CVE-2026-83498
CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...
CVE-2026-84000
CVE-2026-84000 is a heap-based buffer overflow in Microsoft Graphics Component that allows an authorized attacker to execute code locally. The vulnerability requires local access and low privileges but no user interaction, resulting in high impact to confidentiality, integrity, and availability (...
CVE-2026-83995
CVE-2026-83995 is a heap-based buffer overflow in Windows NTFS that allows an authorized attacker to escalate privileges locally. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) , with low attack complexity, low privileges required, and no user interaction needed, resulting in high impac...
EUVD-2026-73915
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-83990
CVE-2026-83990 is a stack-based buffer overflow in the Microsoft Graphics Component that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High) , with a local attack vector, low privileges required, no user interaction, and high impact on confidenti...
EUVD-2026-73913
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-83985
CVE-2026-83985 is a heap-based buffer overflow in Windows Biometric Service that allows an authorized local attacker to elevate privileges . The vulnerability is rated CVSS 7.8 (HIGH) with full impact to confidentiality, integrity, and availability. Attack complexity is low, privileges required a...