Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67381
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
2026-09-09 归档
今日共收录 1483 条安全情报，包含 593 个 CVE，506 篇安全通告，以及 97 篇研究论文。
← 返回归档列表Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67380
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67379
Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67378
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
CVE-2026-67376
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
CVE-2026-67373
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67370
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
CVE-2026-67369
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-67368
Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate pr
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66820
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66819
Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66818
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
CVE-2026-66816
Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-66814
Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a netw
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
CVE-2026-65812
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclo
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
CVE-2026-65772
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-64918
Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a netw
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62895
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
CVE-2026-62813
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
CVE-2026-62810
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate pri