Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-65674 | high | 8.8 | No | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. | 2026-11-02 |
| CVE-2026-67625 | high | 8.5 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 2026-11-02 |
| CVE-2026-85886 | high | 8.5 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 2026-11-02 |
| CVE-2026-94512 | high | 8.8 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 2026-11-02 |
| CVE-2026-91296 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-11-02 |
| CVE-2026-96956 | high | 8.0 | No | Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | 2026-11-02 |
| CVE-2026-68883 | high | 8.5 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. | 2026-11-02 |
| CVE-2026-91297 | medium | 6.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-11-02 |
| CVE-2026-70189 | medium | 6.7 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. | 2026-11-02 |
| CVE-2026-88088 | high | 7.0 | No | Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-91298 | medium | 5.4 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-11-02 |
| CVE-2026-91300 | low | 3.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are a... | 2026-11-02 |
| CVE-2026-91301 | low | 3.6 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported vers... | 2026-11-02 |
| CVE-2026-83945 | medium | 6.6 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. | 2026-11-02 |
| CVE-2026-91302 | low | 3.3 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versi... | 2026-11-02 |
| CVE-2026-91303 | high | 8.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-85876 | high | 7.0 | No | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-91304 | high | 7.8 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |
| CVE-2026-85919 | high | 7.0 | No | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. | 2026-11-02 |
| CVE-2026-91305 | critical | 9.1 | No | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that... | 2026-11-02 |