168761 matches found
CVE-2026-20752
Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
CVE-2026-12571
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
EUVD-2026-56779
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
...
CVE-2026-62869
CVE-2026-62869 affects Azure Entra ID and related services (Azure Active Directory, Entra ID, Entra Provisioning Service, SRE Agent, etc.). The root cause is insufficient verification of data authenticity, enabling an authorized attacker to perform network spoofing. Affected components include Az...
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
...
EUVD-2026-56778
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-50516
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-58639
CVE-2026-58639 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint. The NVD entries indicate an authorized attacker can leverage SSRF to spoof over a network with a base CVSS v3.1 score of 6.5 (Medium): attack vector NETWORK, user interaction NONE, privileges required LO...
CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62839
CVE-2026-62839 describes insufficient protection of credentials in Microsoft Office SharePoint, enabling an authorized attacker to perform network spoofing. The vulnerability is triggered by inadequate credential handling in SharePoint, which may allow an attacker with low privileges and network ...
CVE-2026-65767
Microsoft Teams for Android is affected by CVE-2026-65767 due to improper neutralization of input during web page generation (XSS). Attack requires network access with low privileges and no user interaction; an authorized attacker could spoof content. The CVSS v3.1 base score is 8.8 (HIGH). Affec...
CVE-2026-70306
Summary: CVE-2026-70306 affects Microsoft Office SharePoint. The vulnerability is an improper neutralization of input during web page generation (XSS) that could allow an unauthorized attacker to perform spoofing over a network. Impact: High confidentiality and integrity impact, no availability i...
CVE-2026-70306 Microsoft Office SharePoint Spoofing Vulnerability
...