UBUNTU-CVE-2026-82065

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

UBUNTU-CVE-2026-82062

A security issue in MongoDB Server allows an authenticated user with elevated internal privileges to bypass a disabled feature gate in the applyOps command by specifying an internal replication mode value that was not intended to be client-selectable. This bypass enables execution of container...

CVE-2026-82068

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentiall...

CVE-2026-82064

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

UBUNTU-CVE-2026-82054

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

CVE-2026-82057

A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the...

UBUNTU-CVE-2026-82064

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

EUVD-2026-73754

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-73019

CVE-2026-73019 involves an improper resolution of path equivalence in the Windows URL Moniker component, allowing an unauthorized attacker to bypass a security feature over a network. The vulnerability requires user interaction and grants low confidentiality impact with no integrity or availabili...

CVE-2026-69792

CVE-2026-69792 is a race condition in Windows Win32K caused by concurrent execution of a shared resource with improper synchronization. An authorized local attacker with low privileges and high attack complexity can bypass a security feature , resulting in a HIGH integrity impact with no confiden...

EUVD-2026-73610

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...

EUVD-2026-73604

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69793

CVE-2026-69793 is a security feature bypass vulnerability in Windows TCP/IP , caused by improper validation of consistency within input. An unauthorized, unauthenticated attacker can exploit it over a network with no user interaction to achieve high impact on integrity (no confidentiality or avai...

CVE-2026-69713

CVE-2026-69713 is a security feature bypass in Windows Secure Boot caused by a dependency on a vulnerable third-party component . An authorized attacker with high privileges can exploit this vulnerability locally to bypass a security feature, resulting in a high integrity impact but no confidenti...

EUVD-2026-73603

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-69674

Windows Modern Device Management (MDM) contains a missing authentication vulnerability in a critical function that allows a locally authenticated attacker to bypass a security feature . The CVSS v3.1 score is 5.5 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N , indicating a local a...

EUVD-2026-73588

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

CVE-2026-69277

CVE-2026-69277 is a stack-based buffer overflow in the Microsoft Local Security Authority Server (lsasrv) component that enables a locally authenticated attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privilege...

EUVD-2026-73376

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...

CVE-2026-66816

Microsoft SQL Server is affected by a security feature bypass vulnerability caused by insufficient logging , allowing an authorized attacker with low privileges to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a High confidentiality impa...