Search

Search Results (389500 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-67629 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-08 6.5 Medium
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67389 1 Microsoft 2 Sql Server 2022, Sql Server 2025 2026-09-08 6.5 Medium
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67386 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-08 6.5 Medium
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67383 1 Microsoft 3 Microsoft Sql Server 2025 (cu8), Microsoft Sql Server 2025 For X64-based Systems (gdr), Sql Server 2025 2026-09-08 6.5 Medium
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67376 1 Microsoft 4 Sql Server 2017, Sql Server 2019, Sql Server 2022 and 1 more 2026-09-08 7.5 High
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-66308 1 Microsoft 3 Skype For Business Server 2015, Skype For Business Server 2019, Skype For Business Server Subscription Edition 2026-09-08 6.5 Medium
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66303 1 Microsoft 3 Skype For Business Server 2015, Skype For Business Server 2019, Skype For Business Server Subscription Edition 2026-09-08 6.5 Medium
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-62762 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-09-08 6.5 Medium
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-58848 2026-09-08 7 High
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-57098 1 Microsoft 1 Remote Desktop 2026-09-08 7.5 High
Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-55277 2026-09-08 8 High
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49932 2026-09-08 7.8 High
In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49156 2026-09-08 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-49155 2026-09-08 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-49154 2026-09-08 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-49153 2026-09-08 N/A
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-69369 1 Microsoft 8 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 5 more 2026-09-08 5.5 Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
CVE-2026-69403 1 Microsoft 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more 2026-09-08 5.5 Medium
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.
CVE-2026-69393 1 Microsoft 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more 2026-09-08 5.7 Medium
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.
CVE-2026-67378 1 Microsoft 6 Microsoft Sql Server 2019 (gdr), Microsoft Sql Server 2022 (gdr), Microsoft Sql Server 2025 For X64-based Systems (gdr) and 3 more 2026-09-08 8.5 High
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.