CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.16)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-95695
High

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.

CVE-2026-95641
High

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95639
High

Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

CVE-2026-95638
High

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-95637
High

Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

CVE-2026-95636
High

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

CVE-2026-95635
High

Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code, but exploitation requires user interaction as a victim must open a malicious file.

CVE-2026-94512
High

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. The vulnerability can be exploited remotely, posing a serious threat to system integrity.

CVE-2026-93905
High

IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances. The vulnerability can be exploited without authentication, increasing the risk.

CVE-2026-88088
High

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

CVE-2026-88083
High

Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. The vulnerability can be exploited remotely without authentication, posing a serious threat.

CVE-2026-88082
High

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

CVE-2026-88081
High

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. The vulnerability can be exploited to remotely read data.

CVE-2026-85919
High

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. The vulnerability can be exploited to gain higher privileges on the system.

CVE-2026-85888
High

An out-of-bounds read vulnerability in SQL Server allows an authorized attacker to disclose information over a network.

CVE-2026-85886
High

A heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-85876
High

A use-after-free vulnerability in SQL Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83966
High

Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.

CVE-2026-83965
High

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.

CVE-2026-83661
High

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction - a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS