CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

...

CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

...

CVE-2026-72971

CVE-2026-72971 applies to the Windows Container Isolation FS Filter Driver (unionfs.sys). The issue is improper link resolution before file access ("link following"), enabling a locally authenticated attacker with low privileges to tamper with files. CVSS 3.1 Base: 5.5 (Local, Low attack complexi...

CVE-2026-70348

CVE-2026-70348 describes an issue in Windows Management Services where improper link resolution before file access (link following) can allow an authenticated local attacker to cause a Denial of Service . The available sources state the vulnerability enables local DoS; no exploitable details or p...

CVE-2026-70348 Windows Management Services Denial of Service Vulnerability

...

CVE-2026-70355

CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...

CVE-2026-70347 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-70345

CVE-2026-70345 describes a heap-based buffer overflow in Windows Installer that enables a locally authenticated attacker to achieve elevation of privilege. The root cause is a heap-based overflow within the Windows Installer process, with an attacker requiring local access and no user interaction...

CVE-2026-70346

CVE-2026-70346 is a Windows Installer vulnerability: a stack-based buffer overflow could allow an authorized, local attacker to elevate privileges. The description indicates local execution with high impact, but the documents do not provide exploit details or a remediation/patch. Exploitation sta...

CVE-2026-65783

CVE-2026-65783 is a use-after-free vulnerability in Windows Autopilot that allows an authorized attacker to perform local privilege escalation. The available documents confirm the affected component (Windows Autopilot) and the underlying issue (use-after-free) with a local attacker requiring low ...

CVE-2026-61352 Remote Desktop Client Remote Code Execution Vulnerability

...

CVE-2026-57104

CVE-2026-57104 concerns Azure Storage Explorer, where improper neutralization of input during web page generation enables a cross-site scripting (XSS) vulnerability that can lead to elevation of privilege over a network. According to the CVSS 3.1 data, the issue has a base score of 8.8 (HIGH) wit...

CVE-2026-70336

CVE-2026-70336 – Visual Studio Code Remote Code Execution : The vulnerability is described as improper control of code generation (code injection) in Visual Studio Code that could allow an unauthorized attacker to execute arbitrary code over a network. The NVD/CVE entries indicate a high-severity...

CVE-2026-70327

CVE-2026-70327: Out-of-bounds read in Microsoft Office Excel allows an unauthenticated attacker to disclose information over a network. Affected product: Microsoft Excel; root cause: out-of-bounds read. Impact: information disclosure. CVSS: Network vector, high confidentiality impact, base score ...

CVE-2026-70327 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-70324 Microsoft SharePoint Elevation of Privilege Vulnerability

...

CVE-2026-70322 Powerpoint Information Disclosure Vulnerability

...

CVE-2026-70324

CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...

CVE-2026-70320 Powerpoint Information Disclosure Vulnerability

...

CVE-2026-70323

CVE-2026-70323 – Microsoft Office contains an improper input validation flaw that can allow an unauthorized attacker to locally disclose information. The CVSS v3.1 metrics indicate a Medium base score (5.5) with a Local attack vector, requiring user interaction, and no impact to availability or i...