CVE Vulnerability Database

Search and browse 424,056 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-88089MEDIUM6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
CVE-2026-88088HIGH7Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88086MEDIUM5.3Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-88085MEDIUM6.4Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88084MEDIUM5.3Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a ...
CVE-2026-88083HIGH7.5Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88082HIGH7Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88081HIGH7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85919HIGH7Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85888HIGH7.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-85886HIGH8.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-85876HIGH7Use after free in SQL Server allows an authorized attacker to elevate privileges locally.
CVE-2026-85473MEDIUM5.3The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing...
CVE-2026-83966HIGH7.8Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution ...
CVE-2026-83965HIGH7.8Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe...
CVE-2026-83945MEDIUM6.6Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-83661HIGH7.8Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe...
CVE-2026-79715MEDIUM5.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directorie...
CVE-2026-78633MEDIUM6.5The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribu...
CVE-2026-78632MEDIUM5.3The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER secur...
CVE-2026-78628MEDIUM6The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Ke...
CVE-2026-77816MEDIUM6.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle...
CVE-2026-76001HIGH7.1ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. ...
CVE-2026-75996HIGH7.5ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-se...
CVE-2026-75995HIGH8.4ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in th...