2026 CVEs (page 135)
Page 135 of 666 — CVEs published in 2026, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-68825 | High | 7.0 | 2026-09-08 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-68824 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected User Experiences and Telemetry allows an autho… |
CVE-2026-68787 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
CVE-2026-68786 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-68785 | Medium | 4.9 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-68784 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68781 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68780 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68779 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68778 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68777 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68776 | Medium | 6.5 | 2026-09-08 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-68775 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67648 | Medium | 6.5 | 2026-09-08 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67645 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67643 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-67642 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67641 | Medium | 6.5 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network. |
CVE-2026-67639 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67638 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67636 | Critical | 9.0 | 2026-09-08 | Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-67633 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network. |
CVE-2026-67631 | Critical | 9.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-67630 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67629 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67624 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67393 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67390 | Medium | 6.5 | 2026-09-08 | Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67389 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67388 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67386 | Medium | 6.5 | 2026-09-08 | Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67385 | High | 8.8 | 2026-09-08 | Use after free in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67384 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67383 | Medium | 6.5 | 2026-09-08 | Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67381 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-67380 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67379 | High | 8.5 | 2026-09-08 | Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67378 | Critical | 9.0 | 2026-09-08 | Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-67376 | High | 7.5 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-67373 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67370 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-67369 | Medium | 6.5 | 2026-09-08 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
CVE-2026-67368 | High | 8.8 | 2026-09-08 | Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-66820 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-66819 | High | 8.8 | 2026-09-08 | Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a n… |
CVE-2026-66818 | High | 8.8 | 2026-09-08 | Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-66816 | Medium | 6.5 | 2026-09-08 | Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network. |
CVE-2026-66814 | High | 8.8 | 2026-09-08 | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-65812 | Medium | 6.8 | 2026-09-08 | Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network. |
CVE-2026-65772 | High | 8.8 | 2026-09-08 | Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. |
CVE-2026-65669 | Critical | 9.6 | 2026-09-08 | Improper neutralization of special elements in output used by a downstream component ('injection') in SQL Server allows an unauthorized attacker to elevate pri… |
CVE-2026-64918 | Medium | 6.5 | 2026-09-08 | Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-62895 | High | 8.8 | 2026-09-08 | Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-62813 | High | 7.5 | 2026-09-08 | Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
CVE-2026-62810 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-62804 | High | 7.8 | 2026-09-08 | External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-62801 | Medium | 6.5 | 2026-09-08 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security featu… |
CVE-2026-62762 | Medium | 6.5 | 2026-09-08 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-62759 | High | 7.5 | 2026-09-08 | Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network. |
CVE-2026-62744 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-62706 | High | 8.8 | 2026-09-08 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-62697 | High | 7.8 | 2026-09-08 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
CVE-2026-62694 | High | 7.0 | 2026-09-08 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-58649 | Medium | 6.5 | 2026-09-08 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. |
CVE-2026-58611 | High | 7.8 | 2026-09-08 | Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-58600 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to elevate privileges locally. |
CVE-2026-58599 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
CVE-2026-57099 | High | 7.5 | 2026-09-08 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
CVE-2026-57098 | High | 7.5 | 2026-09-08 | Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network. |
CVE-2026-56198 | High | 7.8 | 2026-09-08 | Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally. |
CVE-2026-56177 | High | 7.8 | 2026-09-08 | Use after free in Windows Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-56172 | High | 7.8 | 2026-09-08 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-55007 | High | 8.1 | 2026-09-08 | Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-54611 | Medium | 5.5 | 2026-09-08 | InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution (RCE) issue that allows remote authentica… |
CVE-2026-50349 | High | 7.0 | 2026-09-08 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authoriz… |
CVE-2026-48707 | Low | 3.1 | 2026-09-08 | InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery (SSRF) vulnerability in the file up… |
CVE-2026-47297 | High | 8.1 | 2026-09-08 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-86668 | Medium | 4.3 | 2026-09-08 | A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.p… |
CVE-2026-86667 | Medium | 4.7 | 2026-09-08 | A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member_list of the file controllers/member.php. This… |
CVE-2026-86073 | High | 7.6 | 2026-09-08 | n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.1, the OAuth token endpoint bound an authorization code's first access token to th… |
CVE-2026-84393 | High | 8.1 | 2026-09-08 | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacke… |
CVE-2026-84392 | Low | 2.7 | 2026-09-08 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 a… |
CVE-2026-84391 | Medium | 6.5 | 2026-09-08 | A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector h… |
CVE-2026-84389 | Low | 3.1 | 2026-09-08 | A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker… |
CVE-2026-84387 | High | 7.2 | 2026-09-08 | A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through… |
CVE-2026-84386 | Medium | 5.1 | 2026-09-08 | A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper acc… |
CVE-2026-84385 | Medium | 5.4 | 2026-09-08 | A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, Fo… |
CVE-2026-82533 | Critical | 9.6 | 2026-09-08 | DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by… |
CVE-2026-82076 | Medium | 6.5 | 2026-09-08 | An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to byp… |
CVE-2026-82075 | High | 7.5 | 2026-09-08 | An uncontrolled resource consumption weakness exists in the request-handling path of the MongoDB sharded-cluster router process. A client that has network acce… |
CVE-2026-82074 | Medium | 6.5 | 2026-09-08 | MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specia… |
CVE-2026-82073 | Medium | 6.5 | 2026-09-08 | A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization check… |
CVE-2026-82071 | High | 8.1 | 2026-09-08 | Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted paramete… |
CVE-2026-82070 | Medium | 6.5 | 2026-09-08 | A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected… |
CVE-2026-82069 | Low | 2.7 | 2026-09-08 | A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query tex… |
CVE-2026-82068 | Medium | 6.5 | 2026-09-08 | A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafte… |
CVE-2026-82067 | High | 8.1 | 2026-09-08 | Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default… |
CVE-2026-82066 | Medium | 4.3 | 2026-09-08 | A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privilege… |
CVE-2026-82065 | Medium | 6.5 | 2026-09-08 | A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persisten… |
CVE-2026-82064 | High | 7.5 | 2026-09-08 | A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server con… |