Microsoft Windows Search Component Tampering Vulnerability

Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

Windows Internet Connection Sharing (ICS) Tampering Vulnerability

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

Windows Cloud Files Mini Filter Driver Tampering Vulnerability

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Windows Shell Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

Chromium: CVE-2026-84328 Missing authorization in FileSystem

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Exchange Server Elevation of Privilege Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

Entra ID Elevation of Privilege Vulnerability

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...

Windows Kernel Elevation of Privilege Vulnerability

Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Chromium: CVE-2026-84323 Missing authorization in FileSystem

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Autopilot Tampering Vulnerability

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...

CVE-2026-33920

CVE-2026-33920 affects the login functionality of Nozomi Networks Guardian/CMC (versions before 26.3.0 ). The root cause is a missing validation of the anti-CSRF token in both standard and SAML login flows. An attacker holding a valid account can coerce a victim into unknowingly authenticating wi...

CVE-2026-78135

creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 04:07:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i4cwgybeay5qa 2026-09-17 04:03:31+00:00| seen|...

EUVD-2026-72755

XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions. Attackers can bypass the option permission declared in the navigation...

CVE-2026-73318 XenForo < 2.3.13 Missing Authorization via force-agreement Controller

XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions. Attackers can bypass the option permission declared in the navigation...

CVE-2026-73318

XenForo versions before 2.3.13 contain a missing authorization flaw in the force-agreement controller . Any ACP administrator can access and submit force-agreement forms regardless of their assigned permissions, bypassing the option permission declared in the navigation configuration. This allows...

EUVD-2026-72754

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...