CVE-2026-100135 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without user interaction. The vulnerability has a high severity score of 7.5 and does not impact confidentiality or availability but affects integrity.
CVE-2026-100113 is an improper input validation vulnerability in the Adobe Content Credentials Rust SDK. This flaw allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-100124 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access without requiring user interaction. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-100125 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized write access. Exploitation does not require user interaction but depends on conditions beyond the attacker's control. The vulnerability has a medium severity with a CVSS score of 5.9.
CVE-2026-48377 is an improper input validation vulnerability in Adobe Content Credentials Rust SDK that allows an attacker to bypass security features and gain unauthorized limited write access without user interaction. The vulnerability has a medium severity with a CVSS score of 5.3. No patch or remediation information is currently provided by the vendor.
CVE-2026-88089 is a heap-based buffer overflow vulnerability in Microsoft SQL Server 2017 (GDR) and related versions. It allows an authorized attacker with high privileges to execute code locally on the affected system. The vulnerability affects multiple versions of Microsoft SQL Server 2017 and later, with fixes available in specific updated releases. The CVSS 3.1 base score is 6.7, indicating a medium severity level. No known exploits in the wild have been reported. Microsoft has issued official fixes for the affected versions.
Adobe ColdFusion 2025 contains an improper input validation vulnerability (CWE-20) that could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability does not require user interaction and affects versions up to 2025.0.13 and 2023.0.25. Exploitation depends on conditions beyond the attacker's control. The vulnerability has a critical severity with a CVSS score of 9.0.
Adobe ColdFusion 2025 contains an improper input validation vulnerability (CWE-20) that allows a low-privileged attacker to execute arbitrary code without user interaction. This vulnerability affects versions up to 2025.0.13 and 2023.0.25. The issue could lead to full compromise of confidentiality, integrity, and availability in the context of the current user.
Adobe ColdFusion 2025 contains an improper input validation vulnerability (CWE-20) that allows an attacker with high privileges to execute arbitrary code without user interaction. The vulnerable component is typically restricted to an administrative network zone. This vulnerability changes the security scope and can lead to full compromise of confidentiality, integrity, and availability.
Adobe ColdFusion 2025 contains an improper input validation vulnerability (CWE-20) that can be exploited to cause an application denial-of-service (DoS). This vulnerability allows an attacker to crash the application without requiring any user interaction. The issue affects versions up to 2025.0.13 and 2023.0.25. The vulnerability has a high severity rating with a CVSS score of 7.5.
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-97805 is a critical out-of-bounds read vulnerability in the Windows Partition Management Driver affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Microsoft has issued official fixes for all affected versions.
CVE-2026-97769 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity score of 8.8 and affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. Official patches have been released by Microsoft to address this issue.
CVE-2026-70294 is an out-of-bounds read vulnerability in the Windows Win32 Kernel Subsystem affecting Windows 10 Version 1607 and other versions. This flaw allows an authorized local attacker to disclose information. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (medium severity). Official patches have been released to address this issue.
CVE-2026-83891 is a high-severity stack-based buffer overflow vulnerability in Microsoft Office Word within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. Microsoft has issued official fixes for this vulnerability.
CVE-2026-70024 is a critical stack-based buffer overflow vulnerability in Microsoft Windows 10 Version 1607 and other specified versions affecting Windows Internet Information Services. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Official patches have been released to address this issue.
CVE-2026-69934 is an integer overflow or wraparound vulnerability in the Windows Spaceport.sys driver affecting Microsoft Windows 11 version 23H2. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed by Microsoft in specific Windows 11 builds.
CVE-2026-85797 is an out-of-bounds read vulnerability in the Windows Graphics Device Interface (GDI) affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a medium severity score of 6.5 and has been officially fixed by Microsoft in specific updates.
CVE-2026-83798 is a vulnerability in Microsoft Windows 10 Version 1607 and related builds involving improper verification of cryptographic signatures in the Windows Update Stack. This flaw allows a local authorized attacker to perform spoofing attacks by exploiting the signature verification weakness. The issue affects multiple Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.