CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.5 HIGH· v3
N/A· v2
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate privileges over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Server allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
-
-
Sep 9, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
-
-
Sep 9, 2026
Sep 8, 2026
5.7 MEDIUM· v4
N/A· v3
N/A· v2
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification...Show more
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer to the ' Security Update for Armoury Crate App  ' section on the ASUS Security Advisory for more information.Show less
-
-
Sep 9, 2026
Sep 7, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Code Injection. This issue affects CSM (Customer Service Management): before 8.0.3.
-
-
Sep 9, 2026
Aug 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic li...Show more
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control.Show less
-
-
Sep 9, 2026
Jul 21, 2026
N/A· v4
2.9 LOW· v3
N/A· v2
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to...Show more
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.Show less