172007 matches found
CVE-2026-61365
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61364
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61356
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-50516
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-42976
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...
CVE-2026-20891
Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...
CVE-2026-20885
Improper authentication in the IntelR TDX module for some IntelR platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...
CVE-2026-20752
Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
CVE-2026-12571
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
EUVD-2026-56779
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
...
CVE-2026-62869
CVE-2026-62869 affects Azure Entra ID and related services (Azure Active Directory, Entra ID, Entra Provisioning Service, SRE Agent, etc.). The root cause is insufficient verification of data authenticity, enabling an authorized attacker to perform network spoofing. Affected components include Az...
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
...
CVE-2026-50516
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-56778
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-58639
CVE-2026-58639 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint. The NVD entries indicate an authorized attacker can leverage SSRF to spoof over a network with a base CVSS v3.1 score of 6.5 (Medium): attack vector NETWORK, user interaction NONE, privileges required LO...