CVE-2026-88081

A vulnerability in Microsoft SQL Server involving an out-of-bounds read allows an authorized attacker to disclose information over a network. Microsoft has released security updates to address this issue, which can be found through relevant Knowledge Base articles including KB5126967 , KB5128495 ...

CVE-2026-85888

A high-severity out-of-bounds read vulnerability exists in Microsoft SQL Server , which may allow an authorized attacker to disclose information over a network. The vulnerability is associated with multiple versions, including SQL Server 2017, 2019, 2022, and 2025 . Microsoft has released securit...

EUVD-2026-100611

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

EUVD-2026-100607

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67628

An out-of-bounds read vulnerability exists in SQL Server , which allows an authorized attacker to disclose information over a network. The vulnerability is categorized as an information disclosure issue. Microsoft has released security updates to address this, including KB5128495 for SQL Server 2...

CVE-2026-103822 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-103825

Substance3D - Designer is vulnerable to an out-of-bounds read (CWE-125) that may lead to the disclosure of sensitive memory. To exploit this vulnerability, an attacker requires user interaction to trick a victim into opening a malicious file . No specific affected versions, root causes, or remedi...

CVE-2026-103825 Substance3D - Designer | Out-of-bounds Read (CWE-125)

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-103822

Substance3D - Designer is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory . An attacker could exploit this issue to access sensitive information, though it requires user interaction to open a malicious file. No specific exploit detai...

CVE-2026-100131

Adobe Substance 3D Sampler is affected by an out-of-bounds read vulnerability (CWE-125) that could lead to the disclosure of sensitive memory. An attacker can leverage this flaw to expose sensitive information, though exploitation requires user interaction to open a malicious file. Adobe has rele...

CVE-2026-100131 Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-100130 Substance3D - Sampler | Out-of-bounds Read (CWE-125)

Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-100130

The software Adobe Substance 3D Sampler is affected by an out-of-bounds read vulnerability (CWE-125) that could allow an attacker to disclose sensitive memory information. Practical exploitation requires user interaction , specifically when a victim opens a malicious file. Adobe has released a pr...

Microsoft Security Advisory CVE-2026-96233 - .NET and Visual Studio Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Runtime. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. DateTime Hebrew-number parsing can read outside...

CVE-2026-106616

ColdFusion is affected by an Improper Restriction of XML External Entity Reference (XXE) vulnerability (CWE-611). This flaw allows an unauthenticated attacker to perform an arbitrary file system read , potentially accessing sensitive files and directories outside the intended scope. Exploitation ...

CVE-2026-106616 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion is affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issu...

CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

EUVD-2026-100518

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-90530

ColdFusion RDS is vulnerable to a path traversal vulnerability (CWE-22) due to improper limitation of pathnames to a restricted directory. This flaw could allow an attacker to perform arbitrary file system reads , accessing sensitive files and directories outside the intended scope. The vulnerabi...