5621 matches found
CVE-2026-47301: Improper Access Control
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...
CVE-2026-47300: Incorrect Implementation of Authentication Algorithm
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-54126: Out-of-bounds Read
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-50685: Double Free
Double free in Windows DHCP Server allows an authorized attacker to execute code over a network...
CVE-2026-50682: Out-of-bounds Read
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...
CVE-2026-54121: Improper Authorization
Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...
CVE-2026-50684: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...
CVE-2026-50647: Loop with Unreachable Exit Condition
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-58279: Missing Authorization
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
CVE-2026-56185: Improper Authentication
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...
CVE-2026-50694: Use After Free
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-50338: Improper Authentication
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...
CVE-2026-57979: Out-of-bounds Read
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...
CVE-2026-57969: Missing Authentication for Critical Function
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
CVE-2026-45646: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-40378: Memory Allocation with Excessive Size Value
Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...
CVE-2026-49787: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network...
CVE-2026-49181: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-34348: Protection Mechanism Failure
Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network...