Vulnerability intelligence platform

Know your exposure.
Stay ahead of threats.

Threat intelligence, made actionable Get actionable vulnerability briefings: affected platforms, exploit intelligence, severity, vendor advisories and remediation guidance. Subscribe to the technologies that matter to your environment.

70,542CVEs in selected period
7,722Critical
28,575High
24,723Medium

Explore vulnerabilities

6,120 matching records · 2026-11-03 19:01 IST
Reset filters
CVE-2026-15468MEDIUM · 6.9
Published 2026-10-14 04:47 IST · Windows

Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3.

CVE-2026-105390MEDIUM · 6.9
Published 2026-10-14 04:47 IST · Network devicesWindows

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.

CVE-2026-97381CRITICAL · 9.9
Published 2026-10-14 03:49 IST · Windows

Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the permitted list falls through without setting E_ACCESSDENIED, causing IsPermitted to return S_OK. An attacker who induces a user to v…

CVE-2026-84419MEDIUM · 6.8
Published 2026-10-14 03:48 IST · Windows

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.

CVE-2026-84420MEDIUM · 5.8
Published 2026-10-14 03:48 IST · Windows

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3.

CVE-2026-110144HIGH · 8.6
Published 2026-10-14 03:47 IST · Windows

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

CVE-2026-110150MEDIUM · 5.5
Published 2026-10-14 03:47 IST · Windows

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)

CVE-2026-97312HIGH · 7.8
Published 2026-10-14 02:50 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-96956HIGH · 8.0
Published 2026-10-14 02:50 IST · Windows

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-96521HIGH · 7.8
Published 2026-10-14 02:50 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-96522HIGH · 7.8
Published 2026-10-14 02:50 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-96523HIGH · 7.8
Published 2026-10-14 02:50 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95639HIGH · 8.6
Published 2026-10-14 02:49 IST · macOS / AppleWindows

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

CVE-2026-95640MEDIUM · 5.5
Published 2026-10-14 02:49 IST · macOS / AppleWindows

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95641HIGH · 7.8
Published 2026-10-14 02:49 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95635HIGH · 7.8
Published 2026-10-14 02:49 IST · macOS / AppleWindows

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95636HIGH · 7.8
Published 2026-10-14 02:49 IST · macOS / AppleWindows

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95637HIGH · 7.8
Published 2026-10-14 02:49 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95638HIGH · 7.8
Published 2026-10-14 02:49 IST · macOS / AppleWindows

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-94512HIGH · 8.8
Published 2026-10-14 02:49 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-88085MEDIUM · 6.4
Published 2026-10-14 02:49 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88088HIGH · 7.0
Published 2026-10-14 02:49 IST · Windows

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88089MEDIUM · 6.7
Published 2026-10-14 02:49 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-88082HIGH · 7.0
Published 2026-10-14 02:49 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88083HIGH · 7.5
Published 2026-10-14 02:49 IST · Windows

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.