283 matches found
Microsoft SharePoint Server - Authentication Bypass
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. id: CVE-2025-49706 info: name: Microsoft SharePoint Server - Authentication Bypass author: daffainfo severity: medium description: | Improper authentication in Microsoft Offi...
fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
...
A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
...
Exploit for Improper Authorization in Microsoft
Certighost Slidev deck This directory contains the Slidev pre...
Exploit for Improper Authorization in Microsoft
cve-id Donate Support the maintenance of this project wit...
DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
...
'dns-error-reporting: yes' leads to stack buffer overflow
...
CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-50458 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50458
CVE-2026-50458 is a use-after-free vulnerability in Microsoft Brokering File System that allows an authorized local attacker to elevate privileges. Exploitation details are not provided in the public text, but the NVD/CIRCL/ENISA references confirm local privilege escalation with a CVSS v3.1 base...
CVE-2026-50466 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-50466
CVE-2026-50466 is a local privilege escalation in the Windows Brokering File System caused by a use-after-free in the Windows Brokering File System component. Public documentation confirms that an authorized attacker could elevate privileges locally (CVSSv3.1 base score 7.8, LOCAL attack vector, ...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability
...
Out-of-Bounds Read in CMS Password-Based Decryption
...
Exploit for Untrusted Pointer Dereference in Microsoft
CVE...
CVE-2026-47638 Microsoft SharePoint Server Spoofing Vulnerability
...
Exploit for Double Free in Microsoft
CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very ow...
Exploit for Improper Input Validation in Microsoft
monikerlinktest cve-2024-21413 1. set up tun0 on router via o...
CVE-2026-35439
CVE-2026-35439 is a remote code execution vulnerability in Microsoft SharePoint Server caused by deserialization of untrusted data. An authorized attacker can exploit this over a network to execute code on affected systems. The CVE is associated with SharePoint Server (on‑premises) and the approv...