146685 matches found
CVE-2026-55006
Microsoft Exchange Server vulnerability CVE-2026-55006: Insufficient granularity of access control enables local privilege escalation for an authorized attacker. Root cause: lack of fine-grained access controls. Impact: high confidentiality, integrity, and availability impact per CVSS 3.1 (AV:L/A...
CVE-2026-55008 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-55008
CVE-2026-55008 affects Microsoft Exchange Server and is caused by improper neutralization of input during web page generation, enabling cross-site scripting. The NVD entry lists a high-severity CVSS 3.1 base score of 9.6 (NETWORK, LOW attack complexity, NONE privileges, user interaction required,...
CVE-2026-55005
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
...
CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
...
CVE-2026-55004
CVE-2026-55004 corresponds to a local privilege-elevation flaw described as a double-free in Microsoft Printer Drivers. The CVSSv3.1 score is 7.8 (High) with local attack vector, low attack complexity, and privileges required, no user interaction, impacting confidentiality, integrity, and availab...
CVE-2026-54993 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
...
CVE-2026-49784 Microsoft Windows App Store Elevation of Privilege Vulnerability
...
CVE-2026-49166
CVE-2026-49166: Use-after-free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally. Affected component is Microsoft Printer Drivers; root cause is a use-after-free condition. Exploitation status is not detailed in the provided documents. Base CVSS v3.1 score i...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-49162
CVE-2026-49162 is a use-after-free in Microsoft Brokering File System leading to local privilege escalation for an authenticated user; CVSSv3.1 indicates high impact (C/H, I/H, A/H) with local exploit required and low privileges. Public details in the connected documents do not specify affected p...
CVE-2026-49162 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2026-42900 Microsoft Windows App Store Elevation of Privilege Vulnerability
...
CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-48561
Improper neutralization of special elements used in a command 'command injection' in Copilot Chat Microsoft Edge allows an unauthorized attacker to execute code over a network...