48854 matches found
EUVD-2026-56688
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-65660
CVE-2026-65660 is a code injection vulnerability in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network, per the NVD entry. Microsoft's own advisory characterizes the impact as remote code execution . The Microsoft CNA CVSS 3.1 score is 8.8 (High) , w...
CVE-2026-64922 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-62914
CVE-2026-62914 is a Microsoft Exchange Server vulnerability involving improper neutralization of input during web page generation (XSS) that allows an authorized attacker to spoof over the network. Affected product: Microsoft Exchange Server. Core issue: cross-site scripting due to input handling...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-62766
CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
EUVD-2026-56325
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61356
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63516
Deserialization of untrusted data in Microsoft Office SharePoint is the root cause of CVE-2026-63516, leading to spoofing over a network by an authorized attacker. Affected component: SharePoint Server (Microsoft Office SharePoint). CVE notes that exploitation is possible through network access w...