8792 matches found
CVE-2026-20752
Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
EUVD-2026-56293
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-20891
CVE-2026-20891 affects the Ring 2: Device Drivers component of Intel PROSet/Wireless WiFi Software for Windows, where an improper authentication flaw permits local escalation of privilege and potential local code execution . The attack requires local access, low privileges, and no user interactio...
EUVD-2026-56508
Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...
EUVD-2026-56505
Improper authentication in the IntelR TDX module for some IntelR platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...
CVE-2026-20885
Improper authentication in the IntelR TDX module for some IntelR platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...
CVE-2026-20885
Improper authentication in the IntelR TDX module for some IntelR platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...
CVE-2026-20885
CVE-2026-20885 concerns the Intel(R) TDX module on certain Intel platforms, where improper authentication in the Ring 0 Trust Domain can enable information disclosure and privilege escalation. The NVD/CVE records describe a local-attack scenario requiring a privileged user, with high attack compl...
CVE-2026-20752
Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
EUVD-2026-56487
Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
CVE-2026-20752
Improper authentication for some IntelR PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-20891: Improper Authentication
Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...
PT-2026-70564
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper authentication allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, there is no...
PT-2026-70293
Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description Improper authentication within Ring 0 the most privileged level of the CPU of the kernel may allow an information disclosure. A system software adversary with...
CVE-2026-51584: Improper Authentication
An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...
CVE-2026-71467: Improper Authentication
A flaw was found in search-v2-api. The authentication middleware in the affected component unconditionally skips authentication when a request includes an Upgrade: websocket header. An unauthenticated attacker can exploit this by sending a specially crafted HTTP POST request to the /federated...
2026.3 IPU, Intel® Trust Domain Extensions (Intel® TDX) module Advisory
Summary: Potential security vulnerabilities for some Intel® TDX modules may allow information disclosure, escalation of privilege, or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20885 Description:...
CVE-2026-20885: Improper Authentication
Improper authentication in the IntelR TDX module for some IntelR platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...