168934 matches found
CVE-2026-62784 Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability
...
EUVD-2026-56382
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-62766
CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
CVE-2026-61928
An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...
EUVD-2026-56326
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-56325
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61356
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
EUVD-2026-56313
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63516
Deserialization of untrusted data in Microsoft Office SharePoint is the root cause of CVE-2026-63516, leading to spoofing over a network by an authorized attacker. Affected component: SharePoint Server (Microsoft Office SharePoint). CVE notes that exploitation is possible through network access w...
EUVD-2026-56293
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-62829
CVE-2026-62829 describes an XSS-like input handling flaw in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network. The root cause is the improper neutralization of input during web page generation. Affected product is Microsoft SharePoint Server; the CV...