CVE-2026-85888

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-85886

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-85876

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83945

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-77816

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information...

CVE-2026-79715

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

CVE-2026-70189

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-67628

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-67626

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-67625

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-65674

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-68883

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-14532

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...

CVE-2026-14909

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled...

CVE-2026-11713

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled...

CVE-2026-105443

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install...

CVE-2026-105442

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service...

CVE-2026-101294

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-969...

CVE-2026-94520

A use of an externally-controlled format string in Microsoft SQL Server allows an authorized attacker to perform a denial-of-service (DoS) attack over a network. Microsoft has released security updates to address this vulnerability, including updates for SQL Server 2019 (CU32, GDR) , SQL Server 2...