168639 matches found
CVE-2026-64900
CVE-2026-64900 affects Microsoft Office SharePoint and is described as an improper neutralization of input during web page generation (XSS) that enables an authorized attacker to perform spoofing over a network. Exploitation requires network access, low attack complexity, low privileges , and use...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897
CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897 Microsoft SharePoint Server Spoofing Vulnerability
...
EUVD-2026-56688
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-56628
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally...
CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability
...
CVE-2026-62698
The CVE-2026-62698 entry concerns a numeric truncation error in Microsoft Digest Authentication. The vulnerability is described as enabling a locally authenticated attacker to achieve privilege elevation (base score 7.8, CVSS 3.1, LOCAL, LOW privileges required, NONE user interaction, HIGH impact...
CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability
...
EUVD-2026-56617
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-56618
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
EUVD-2026-56604
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-65675
Technical details (affected product/version, root cause, exploitability) are not publicly available in the provided documents; monitor for updates.
CVE-2026-65660 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-65660
CVE-2026-65660 describes an improper control of code generation (code injection) in Microsoft Office SharePoint / SharePoint Server , enabling an authorized attacker to perform spoofing over a network . The vulnerability is triggered via a network attack vector with low attack complexity and low ...