Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 212/1809
7.5
CVE-2026-100119

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

7.5
CVE-2026-100118

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security

7.5
CVE-2026-100117

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

5.9
CVE-2026-100116

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security

7.5
CVE-2026-100115

CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature

7.5
CVE-2026-100114

CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature

7.5
CVE-2026-100113

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security featur

7.8
CVE-2026-97312

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

8.0
CVE-2026-96956

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.

7.8
CVE-2026-96523

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

7.8
CVE-2026-96522

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

7.8
CVE-2026-96521

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

6.5
CVE-2026-95696

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial o

7.4
CVE-2026-95695

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security

7.8
CVE-2026-95641

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

5.5
CVE-2026-95640

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-

8.6
CVE-2026-95639

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution

7.8
CVE-2026-95638

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio

7.8
CVE-2026-95637

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t

7.8
CVE-2026-95636

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

7.8
CVE-2026-95635

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the contex

4.9
CVE-2026-94520

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.

8.8
CVE-2026-94512

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

9.1
CVE-2026-93909

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerab

8.2
CVE-2026-93905

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to

9.1
CVE-2026-93895

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to

9.3
CVE-2026-90530

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerab

6.7
CVE-2026-88089

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.

7.0
CVE-2026-88088

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.

5.3
CVE-2026-88086

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.

6.4
CVE-2026-88085

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

5.3
CVE-2026-88084

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a

7.5
CVE-2026-88083

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

7.0
CVE-2026-88082

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.7
CVE-2026-88081

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

7.0
CVE-2026-85919

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.

7.7
CVE-2026-85888

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

8.5
CVE-2026-85886

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

7.0
CVE-2026-85876

Use after free in SQL Server allows an authorized attacker to elevate privileges locally.

5.3
CVE-2026-85473

The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing

7.8
CVE-2026-83966

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution

7.8
CVE-2026-83965

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code exe

6.6
CVE-2026-83945

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

7.8
CVE-2026-83661

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exe

5.5
CVE-2026-79715

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directorie

6.5
CVE-2026-78633

The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribu

5.3
CVE-2026-78632

The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER secur

6.0
CVE-2026-78628

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Ke

6.5
CVE-2026-77816

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle

7.1
CVE-2026-76001

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →