OpenEXR: OpenEXR: Information disclosure and denial of service via out-of-bounds read

A flaw was found in OpenEXR. An attacker can craft a malicious deep EXR image file that, when opened by an application, can lead to an out-of-bounds read in the OpenEXRUtil library's SampleCountChannel::row API. This vulnerability can result in information disclosure, where adjacent heap memory i...

GHSA-F8QH-MQG4-9939 Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...

CVE-2026-100126

Adobe Bridge is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker can exploit this issue to access sensitive information, but the attack requires user interaction , specifically the victim opening a malicious file. No spe...

CVE-2026-100126 Bridge | Out-of-bounds Read (CWE-125)

Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-100614

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...

CVE-2026-88086

An out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an unauthorized attacker to disclose information over an adjacent network. While specific versions are not detailed in the description, related security updates are identified in KB5126967 , KB5128495 , KB5128492...

EUVD-2026-100612

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-88081

A vulnerability in Microsoft SQL Server involving an out-of-bounds read allows an authorized attacker to disclose information over a network. Microsoft has released security updates to address this issue, which can be found through relevant Knowledge Base articles including KB5126967 , KB5128495 ...

EUVD-2026-100611

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-85888

A high-severity out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an authorized attacker to disclose information over a network. The vulnerability is associated with multiple versions, including SQL Server 2017, 2019, 2022, and 2025 . Microsoft has released securit...

EUVD-2026-100607

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67628

An out-of-bounds read vulnerability exists in SQL Server , which allows an authorized attacker to disclose information over a network. The vulnerability is categorized as an information disclosure issue. Microsoft has released security updates to address this, including KB5128495 for SQL Server 2...

CVE-2026-103822 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-103825

Substance3D - Designer is vulnerable to an out-of-bounds read (CWE-125) that may lead to the disclosure of sensitive memory. To exploit this vulnerability, an attacker requires user interaction to trick a victim into opening a malicious file . No specific affected versions, root causes, or remedi...

CVE-2026-103825 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-103822

Substance3D - Designer is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker could exploit this issue to access sensitive information, though it requires user interaction to open a malicious file. No specific exploit detai...

CVE-2026-100131

Adobe Substance 3D Sampler is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory. An attacker can leverage this flaw to expose sensitive information, though exploitation requires user interaction to open a malicious file. Adobe has rele...

CVE-2026-100131 Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-100130

The software Adobe Substance 3D Sampler is affected by an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Practical exploitation requires user interaction , specifically when a victim opens a malicious file. Adobe has released a pr...

CVE-2026-100130 Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...