Vulnerability intelligence platform

Know your exposure.
Stay ahead of threats.

Threat intelligence, made actionable Get actionable vulnerability briefings: affected platforms, exploit intelligence, severity, vendor advisories and remediation guidance. Subscribe to the technologies that matter to your environment.

70,550CVEs in selected period
7,723Critical
28,582High
24,733Medium

Explore vulnerabilities

6,120 matching records · 2026-11-03 20:01 IST
Reset filters
CVE-2026-85919HIGH · 7.0
Published 2026-10-14 02:49 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-85886HIGH · 8.5
Published 2026-10-14 02:49 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-85876HIGH · 7.0
Published 2026-10-14 02:49 IST · Windows

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83945MEDIUM · 6.6
Published 2026-10-14 02:49 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-83661HIGH · 7.8
Published 2026-10-14 02:48 IST · macOS / AppleWindows

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-78628MEDIUM · 6.0
Published 2026-10-14 02:48 IST · Windows

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate unexpectedly or lead to out-of-bounds memory reads and writes, which may result in the disclosure of adjacent process memory into local syste…

CVE-2026-78632MEDIUM · 5.3
Published 2026-10-14 02:48 IST · Windows

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES encryption key and the encrypted Okta API token.

CVE-2026-70189MEDIUM · 6.7
Published 2026-10-14 02:48 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

CVE-2026-65674HIGH · 8.8
Published 2026-10-14 02:47 IST · Windows

Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-67625HIGH · 8.5
Published 2026-10-14 02:47 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-68883HIGH · 8.5
Published 2026-10-14 02:47 IST · Windows

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-105896MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-104346HIGH · 7.8
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-104347HIGH · 7.8
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-104348HIGH · 7.8
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103828MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103829MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103821HIGH · 7.8
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103822MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103823MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103824MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103825MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103826MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103827MEDIUM · 5.5
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-100111HIGH · 7.8
Published 2026-10-14 02:47 IST · macOS / AppleWindows

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.