175400 matches found
CVE-2026-62766
CVE-2026-62766 describes a double free in Windows Kerberos that allows an authorized attacker to elevate privileges locally . The affected component is Windows Kerberos; the underlying cause is a memory-management error leading to a use-after-free-like condition, as stated. The provided documents...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
CVE-2026-61928 Windows Hello Tampering Vulnerability
...
CVE-2026-61928
An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...
EUVD-2026-56326
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
EUVD-2026-56325
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-61356
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-59135
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
EUVD-2026-56313
Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
...
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-63516
Deserialization of untrusted data in Microsoft Office SharePoint is the root cause of CVE-2026-63516, leading to spoofing over a network by an authorized attacker. Affected component: SharePoint Server (Microsoft Office SharePoint). CVE notes that exploitation is possible through network access w...
EUVD-2026-56293
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability
...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62829
CVE-2026-62829 describes an XSS-like input handling flaw in Microsoft Office SharePoint that allows an authorized attacker to perform spoofing over a network. The root cause is the improper neutralization of input during web page generation. Affected product is Microsoft SharePoint Server; the CV...
CVE-2026-58650
CVE-2026-58650 describes an authorization bypass in Visual Studio Code triggered by a user-controlled key, enabling a local attacker to bypass a security feature. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with Local attack vector, Low attack complexity, and no privileges required, ...
CVE-2026-12571
The CVE-2026-12571 entry describes an authentication bypass in ManageEngine DDI Central’s password-reset workflow that enables account takeover. The NVD entry confirms a critical impact (CVSS 3.1: 9.8, NETWORK attack vector, no user interaction) with high impact on confidentiality, integrity, and...