Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-97312 — Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.0 HIGH
CVE-2026-96956 — SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
7.8 HIGH
CVE-2026-96523 — Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-96522 — Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-96521 — Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
6.5 MEDIUM
CVE-2026-95696 — IBM WebSphere Application Server Liberty Denial of Service

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.

websphere_application_server_liberty | Remote | Denial of Service
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.4 HIGH
CVE-2026-95695 — IBM WebSphere Application Server Liberty Incorrect Authorization

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.

websphere_application_server_liberty | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-95641 — Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

photoshop | Memory Corruption
Oct 13, 2026 Oct 15, 2026
Oct 13, 2026
Oct 15, 2026
5.5 MEDIUM
CVE-2026-95640 — Photoshop Desktop | NULL Pointer Dereference (CWE-476)

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application,…

photoshop | Denial of Service
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.6 HIGH
CVE-2026-95639 — Photoshop Desktop | Incorrect Authorization (CWE-863)

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerabilit…

photoshop | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-95638 — Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user …

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-95637 — Photoshop Desktop | Out-of-bounds Write (CWE-787)

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user intera…

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-95636 — Photoshop Desktop | Integer Overflow or Wraparound (CWE-190)

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires …

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
7.8 HIGH
CVE-2026-95635 — Photoshop Desktop | Double Free (CWE-415)

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute …

photoshop | Memory Corruption
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
4.9 MEDIUM
CVE-2026-94520 — Microsoft SQL Server Denial of Service Vulnerability

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
8.8 HIGH
CVE-2026-94512 — SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Oct 13, 2026 Oct 13, 2026
Oct 13, 2026
Oct 13, 2026
9.1 CRITICAL
CVE-2026-93909 — IBM WebSphere Application Server Liberty is affected by an authentication bypass

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.

websphere_application_server_liberty | Remote | Authentication
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
8.2 HIGH
CVE-2026-93905 — IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted da…

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.

websphere_application_server_liberty | Remote | Denial of Service
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.1 CRITICAL
CVE-2026-93895 — IBM WebSphere Application Server Liberty Improper Access Control

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.

websphere_application_server_liberty | Remote | Authorization
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
9.3 CRITICAL
CVE-2026-90530 — ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal…

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit …

| Path Traversal
Oct 13, 2026 Oct 14, 2026
Oct 13, 2026
Oct 14, 2026
Showing 20 of 16517 Results