162336 matches found
CVE-2026-102238: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-102861: Missing Authorization
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-102862: Incorrect Authorization
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-102869: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-103576: URL Redirection to Untrusted Site
Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-105008: Unprotected Alternate Channel
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-105010: Use After Free
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-105013: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-105713: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network...
CVE-2026-107605: Missing Authentication for Critical Function
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication...
CVE-2026-107607: Missing Authentication for Critical Function
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...
CVE-2026-12656: Allocation of Resources Without Limits or Throttling
A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communication, cause device faults, and affect open TCP and UDP ports. A power cycle is required to recover the device to it...
CVE-2026-105718: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
CVE-2026-105720: Incorrect Authorization
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-105723: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-105727: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...
CVE-2026-108129: Out-of-bounds Read
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-108463: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...