427 matches found
EUVD-2026-89721
A flaw was found in Moodle. The manual enrolment management page did not properly check whether the manual enrolment plugin was disabled, allowing users with enrolment permissions to access the page directly by navigating to its URL. Consequently, an authorized user could manage manual enrolments...
CVE-2026-76681: Improper Access Control
A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege level. Successful exploitation could allow an attacker to retrieve information...
CVE-2026-85921
CVE-2026-85921 is a double free vulnerability in Windows Secure Kernel Mode that allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexity, high privileges required, and changed scope , resulting in high impact to con...
CVE-2026-70341
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
CVE-2026-83987
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83985
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83969
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83948
Improper neutralization of special elements used in a command 'command injection' in Microsoft Azure CLI allows an authorized attacker to execute code over a network...
CVE-2026-81349
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
CVE-2026-72993
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72988
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72980
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
CVE-2026-72945
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...
CVE-2026-71337
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
CVE-2026-70584
Access of resource using incompatible type 'type confusion' in Windows Core Messaging allows an authorized attacker to elevate privileges locally...
CVE-2026-70565
Use after free in Windows AFUNIX Socket Provider allows an authorized attacker to elevate privileges locally...
CVE-2026-69862
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally...
CVE-2026-69785
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...