225901 matches found
CVE-2026-57105
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
UBUNTU-CVE-2026-62909
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-48435
CAI Content Credentials is affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not...
CVE-2026-48375
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user...
DEBIAN-CVE-2026-20713
Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...
EUVD-2026-56778
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-68817
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56747
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65780 Windows Autopilot Elevation of Privilege Vulnerability
...
EUVD-2026-56730
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-65773
CVE-2026-65773 concerns improper access control in Windows Kernel, enabling a locally authenticated attacker to elevate privileges. Affected software/component: Windows Kernel (details not expanded in provided documents). Root cause: incorrect access control checks; impact: local privilege escala...
CVE-2026-62882 Microsoft Outlook Spoofing Vulnerability
...
CVE-2026-64911
CVE-2026-64911 is an integer overflow/wraparound vulnerability in Microsoft Office that enables local code execution by an attacker with user interaction. The root cause is an overflow in a Microsoft Office component, enabling a privileged or unauthenticated user to run arbitrary code locally onc...
EUVD-2026-56695
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
EUVD-2026-56692
Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
EUVD-2026-56689
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-62881
The CVE-2026-62881 entry describes a numeric truncation flaw in Windows DNS that allows an authenticated, local attacker to elevate privileges. Affected component is the Windows DNS service; root cause is a numeric truncation error. Exploitation is local with high privileges required and no user ...
CVE-2026-62823
CVE-2026-62823 affects Windows DHCP Server and is caused by a heap-based buffer overflow in the DHCP service. This vulnerability enables remote code execution by an attacker on an adjacent network, with an attack vector of Adjacent Network and no user interaction required. The CVSS 3.1 base score...