6133 matches found
EUVD-2026-73715
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-69636
CVE-2026-69636 is an SQL injection vulnerability in Microsoft Office SharePoint , caused by improper neutralization of special elements used in SQL commands. An authorized attacker with low privileges can exploit it over a network to disclose information , with high confidentiality impact but no ...
CVE-2026-69615
CVE-2026-69615 is an improper neutralization of input during web page generation (cross-site scripting) vulnerability in Microsoft Office SharePoint . An authorized attacker with high privileges and required user interaction can perform spoofing over a network . NVD rates it 4.8 (MEDIUM) ; Micros...
EUVD-2026-73713
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73712
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-69464
Microsoft Office SharePoint contains an elevation of privilege vulnerability characterized as execution with unnecessary privileges. An authorized attacker with low privileges can exploit this over a network to escalate their access, with high impact on confidentiality, integrity, and availabilit...
CVE-2026-69593
A heap-based buffer overflow in the Windows Biometric Service allows an authorized local attacker with low privileges to elevate privileges on the affected system. The vulnerability requires no user interaction and results in High impact across confidentiality, integrity, and availability, yieldi...
CVE-2026-69568
CVE-2026-69568 is an out-of-bounds read vulnerability in the Windows Storage Spaces Controller component. An authorized attacker with local access and low privileges can exploit this flaw to achieve information disclosure (high confidentiality impact, no integrity or availability impact). The CVS...
CVE-2026-69560
CVE-2026-69560 is a use-after-free vulnerability in the Windows Work Folder Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting a high attack complexity and low privileges requir...
EUVD-2026-73702
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...
CVE-2026-69489
A heap-based buffer overflow in the Windows Biometric Service allows a low-privilege local attacker to escalate privileges. The flaw requires no user interaction and is rated CVSS 7.8 (HIGH) with high impact on confidentiality, integrity, and availability. No specific affected Windows version or ...
EUVD-2026-73697
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
CVE-2026-69417
CVE-2026-69417 is a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint , caused by improper neutralization of input during web page generation. An authorized attacker with low privileges can perform spoofing over a network , requiring user interaction. The CVSS 3.1 score is 7...
CVE-2026-69426
CVE-2026-69426 is a heap-based buffer overflow in the Windows VOLSNAP.SYS driver (part of the Volume Shadow Copy service). An authorized attacker with low privileges can exploit this flaw to achieve local code execution with high impact on confidentiality, integrity, and availability. The vulnera...
EUVD-2026-73695
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-69409
Microsoft Office SharePoint is affected by an information disclosure vulnerability caused by execution with unnecessary privileges , allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 6.5 (Medium) with high confidentiality impact but no integrity or avai...
EUVD-2026-73694
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-73692
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
CVE-2026-69395
Active Directory Certificate Services (AD CS) contains a vulnerability caused by the use of an externally-controlled format string , allowing an authorized attacker (low privileges required) to disclose information over a network . The CVSS v3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR...