GHSA-JQHP-238X-QHGF Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in SQL

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17111, CVE-2026-17110, CVE-2026-17109, CVE-2026-17420, CVE-2026-17222, CVE-2026-17419, CVE-2026-17418 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17111 DESCRIPTION: IBM i is...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17083, CVE-2026-16907, CVE-2026-17248, CVE-2026-17271, CVE-2026-17082 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17083 DESCRIPTION: IBM i could allow a remote attacker to...

Security Bulletin: IBM i is Affected By An Improper Validation Vulnerability in PASE [CVE-2026-16987]

Summary IBM i is vulnerable to elevated privileges due to improper validation CVE-2026-16987 in Portable Application Solutions Environment PASE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16987 DESCRIPTION: IBM i could allow a local attacker to gain...

Security Bulletin: IBM i is Affected By An Unauthorized Privileges Vulnerability in SQL [CVE-2026-16722]

Summary IBM i is vulnerable to obtaining unauthorized privleges due to improper privilege management CVE-2026-16722 in SQL as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16722 DESCRIPTION: IBM i could allow a remote authenticated attacker to obtain...

Security Bulletin: IBM i is Affected By A Privilege Escalation Vulnerability [CVE-2026-18669]

Summary IBM i is vulnerable to privilege escalation CVE-2026-18669 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18669 DESCRIPTION: IBM i is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engi...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Domain Name System

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-16906, CVE-2026-16856 in BIND Domain Name System DNS as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16906 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute arbitrary...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Navigator for i

Summary IBM i is vulnerable to multiple vulnerabillities CVE-2026-16694, CVE-2026-17101, CVE-2026-17099, CVE-2026-16904, CVE-2026-17095, CVE-2026-17094, CVE-2026-17268, CVE-2026-17266, CVE-2026-17276, CVE-2026-18099, CVE-2026-18098, CVE-2026-18235, CVE-2026-18713, CVE-2026-18683, CVE-2026-18250,...

CVE-2026-18712

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...

EUVD-2026-56885

An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain...

CVE-2026-18698

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

EUVD-2026-56882

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

CVE-2026-18698 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections via the validate Command

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

EUVD-2026-56881

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...

CVE-2026-18690

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-18690 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...

Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...

CVE-2026-18690

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...

CVE-2026-68262

A flaw was found in the Linux kernel. The drm/imagination component's pvrsetuobjarray function mishandles the user array stride during copies of kernel objects to a userspace array. This error causes incorrect memory access, leading to memory corruption where data is written to unintended...