Baza CVE
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Photoshop | CVE-2026-95641 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
7,8 | 0,18 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| WebSphere Application Server - Liberty | CVE-2026-95695 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization. |
9,1 | 0,32 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| WebSphere Application Server - Liberty | CVE-2026-95696 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception. |
7,5 | 0,33 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2017 (GDR) / Microsoft SQL Server 2017 for x64-based Systems (CU31) / Microsoft SQL Server 2019 (GDR) (+6 produktów) | CVE-2026-94512 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
8,8 | 0,65 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2017 (GDR) / Microsoft SQL Server 2017 for x64-based Systems (CU31) / Microsoft SQL Server 2019 (GDR) (+6 produktów) | CVE-2026-94520 Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. |
4,9 | 0,84 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Photoshop | CVE-2026-95635 Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a… |
7,8 | 0,21 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Photoshop | CVE-2026-95636 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
7,8 | 0,21 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Photoshop | CVE-2026-95637 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
7,8 | 0,18 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Photoshop | CVE-2026-95638 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
7,8 | 0,23 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| ColdFusion 2025 / ColdFusion 2023 | CVE-2026-90530 ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope.… |
9,3 | 0,34 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| WebSphere Application Server - Liberty | CVE-2026-93895 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods. |
9,1 | 0,39 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| WebSphere Application Server - Liberty | CVE-2026-93905 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances. |
8,2 | 0,33 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| WebSphere Application Server - Liberty | CVE-2026-93909 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled. |
9,1 | 0,38 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2017 (GDR) / Microsoft SQL Server 2017 for x64-based Systems (CU31) / Microsoft SQL Server 2019 (GDR) (+5 produktów) | CVE-2026-88085 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
6,4 | 0,24 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2019 (GDR) / Microsoft SQL Server 2019 for x64-based Systems (CU32) / Microsoft SQL Server 2022 (GDR) (+3 produktów) | CVE-2026-88086 Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. |
5,3 | 0,36 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2019 (GDR) / Microsoft SQL Server 2019 for x64-based Systems (CU32) / Microsoft SQL Server 2022 (GDR) (+3 produktów) | CVE-2026-88088 Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. |
7,0 | 0,23 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2017 (GDR) / Microsoft SQL Server 2017 for x64-based Systems (CU31) / Microsoft SQL Server 2019 (GDR) (+6 produktów) | CVE-2026-88089 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
6,7 | 0,3 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2017 (GDR) / Microsoft SQL Server 2017 for x64-based Systems (CU31) / Microsoft SQL Server 2019 (GDR) (+5 produktów) | CVE-2026-88081 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
7,7 | 0,8 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2019 (GDR) / Microsoft SQL Server 2019 for x64-based Systems (CU32) / Microsoft SQL Server 2022 (GDR) (+3 produktów) | CVE-2026-88082 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
7,0 | 0,23 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2022 (GDR) / Microsoft SQL Server 2022 for x64-based Systems (CU27) / Microsoft SQL Server 2025 for x64-based Systems (CU9) (+1… | CVE-2026-88083 Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
7,5 | 0,49 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2019 (GDR) / Microsoft SQL Server 2019 for x64-based Systems (CU32) | CVE-2026-88084 Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. |
5,3 | 0,68 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2019 (GDR) / Microsoft SQL Server 2019 for x64-based Systems (CU32) / Microsoft SQL Server 2022 (GDR) (+3 produktów) | CVE-2026-85919 Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
7,0 | 0,23 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2017 (GDR) / Microsoft SQL Server 2017 for x64-based Systems (CU31) / Microsoft SQL Server 2019 (GDR) (+5 produktów) | CVE-2026-85886 Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
8,5 | 0,4 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2017 (GDR) / Microsoft SQL Server 2017 for x64-based Systems (CU31) / Microsoft SQL Server 2019 (GDR) (+5 produktów) | CVE-2026-85888 Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
7,7 | 0,8 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków | |
| Microsoft SQL Server 2019 (GDR) / Microsoft SQL Server 2019 for x64-based Systems (CU32) / Microsoft SQL Server 2022 (GDR) (+3 produktów) | CVE-2026-85876 Use after free in SQL Server allows an authorized attacker to elevate privileges locally. |
7,0 | 0,19 %Nieaktualne | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 11:02 UTC – 15.11.2026, 16:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.