CVE-2026-63146

The Omnispace Agora Project (versions prior to 26.10.0 ) is vulnerable to a PHP code injection flaw. The root cause involves unescaped, attacker-controlled values being written into the config.inc.php file via the File::updateConfigFile() and DbInstall::dbControl() functions during installation. ...

CVE-2026-63146

Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile and DbInstall::dbControl, combined with an SQL injection issue enabl...

CVE-2026-96220

Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...

CVE-2026-85359

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-83759

Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...

CVE-2026-103572

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-102870

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-102863

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-102870

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-102870

ASP.NET Core is vulnerable to improper control of generation of code (code injection) , which allows an unauthorized attacker to execute code over a network. This vulnerability has a HIGH severity with a CVSS score of 8.80 , and the potential impact includes the execution of arbitrary code . Whil...

EUVD-2026-100325

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-102870

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-96220

The Windows Assigned Access feature contains an improper control of generation of code (code injection) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-94 . No specific exploit links or exploit details are p...

CVE-2026-85359

A code injection vulnerability (CWE-94) exists in Windows Performance Monitor , where improper control of code generation allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 and is categorized as high severity. Official remediati...

CVE-2026-83759

A code injection vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the documents confirm the existence of ...

CVE-2026-102863

A code injection vulnerability (CWE-94 ) exists in Microsoft Office SharePoint , where an authorized attacker can elevate privileges over a network. This vulnerability has a CVSS 3.1 score of 8.8 (High) . Microsoft has released updates to address this issue; users are encouraged to install the la...

EUVD-2026-99046

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

EUVD-2026-99027

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-103572

A code injection vulnerability exists in Visual Studio Tools for Applications and SQL Server Management Studio . Due to improper control of code generation, an unauthorized attacker can execute arbitrary code over a network. This vulnerability has a CVSS 3.1 score of 8.8 and is reported to have a...

CVE-2026-108383

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.getfielddefault renders a schema-controlled enum field default as an enum member reference...