6252 matches found
CVE-2026-50523
CVE-2026-50523 : Microsoft PowerShell is affected by a vulnerability described as improper neutralization of special elements used in a command (command injection), allowing an authorized attacker to execute code locally. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW attack ...
Exploit for CVE-2026-53413
cve-id Donate Support the maintenance of this project wit...
.NET: .NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
.NET: .NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70344
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-70321
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-65815
Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...
CVE-2026-65798
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-65783
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-65781
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-65663
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-65660
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-64922
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-64916
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-64902
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-64900
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-62912
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...
CVE-2026-62913
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...