1273155 matches found
GHSA-C27M-942F-RCFH Microsoft Security Advisory CVE-2026-87697 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. WPF XPS synthetic...
GHSA-XQ57-CRX4-G373 Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
GHSA-F63G-MX39-3R38 Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Attacker-controlled X...
GHSA-4W5F-7JP2-W48G Microsoft Security Advisory CVE-2026-83520 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
GHSA-F749-VHGX-39H6 Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. WPF XPS hyperlink...
Microsoft Security Advisory CVE-2026-70174 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. WPF XPS hyperlink...
GHSA-G44W-H65V-4CW9 Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Crafted WPF...
CVE-2026-100128
Adobe Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction , specifically the opening of a malicious file. While Adobe is not aware of any exploits in the wil...
CVE-2026-100128 Bridge | Out-of-bounds Write (CWE-787)
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-100129
Adobe Bridge is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically for a victim to open a malicious file. Adobe has released a pr...
CVE-2026-100129 Bridge | Out-of-bounds Write (CWE-787)
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-100127 Bridge | Out-of-bounds Write (CWE-787)
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-100127
Adobe Bridge is affected by an out-of-bounds write vulnerability (CWE-787 ) that could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically when a victim opens a malicious file. Adobe has released a pr...
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-969...
CVE-2026-94512
A heap-based buffer overflow vulnerability in Microsoft SQL Server allows an authorized attacker to achieve remote code execution over a network. This vulnerability could lead to a denial-of-service attack, the acquisition of excessive privileges, or unauthorized access to sensitive data. Remedia...
EUVD-2026-100619
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-88089
A heap-based buffer overflow exists in Microsoft SQL Server , which could allow an authorized attacker to execute code locally . This vulnerability is associated with several security updates, including KB5126967 (SQL Server 2025 CU9), KB5128495 (SQL Server 2019 GDR), KB5128496 (SQL Server 2017 C...
EUVD-2026-100618
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...
CVE-2026-88083
A stack-based buffer overflow vulnerability exists in Microsoft SQL Server that could allow an unauthorized attacker to execute arbitrary code over a network. Exploitation of this flaw could lead to a denial-of-service attack, the acquisition of excessive privileges, or unauthorized access to sen...