2237 matches found
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...
CVE-2026-97381
Legacy Update versions 1.12.0 through 1.13.1 are vulnerable to an origin validation error in the IsPermitted method of its ActiveX control. Due to a logic flaw, hostnames not on the permitted list fail to trigger an E_ACCESSDENIED error, causing the method to incorrectly return S_OK. An attacker ...
Microsoft Security Advisory CVE-2026-96234 - .NET and Visual Studio Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.WindowsDesktop.App.Runtime WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. Restrictive XAML and...
CVE-2026-96234
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-88132
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...
CVE-2026-70213
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...
CVE-2026-69877
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...
CVE-2026-96234
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96234
An origin validation error in .NET allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the NCSC advisory. Exploitation details are not provided.
CVE-2026-96234
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96238
A vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network due to an origin validation error . This flaw enables an attacker to skip security measures with a CVSS 3.1 score of 6.5. No specific versions or remediation details are provided in the documents.
EUVD-2026-100207
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96238
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-88132
An origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. This vulnerability is classified as an Access to Sensitive Data issue with a CVSS v3.1 score of 5.9 (Medium) . Microsoft has released updates to address this vulnerability; users ...
CVE-2026-70213
An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...
EUVD-2026-99610
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...
EUVD-2026-99597
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...
CVE-2026-69877
An origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the CVSS metric and the CVE description. Microsoft has released updates to address this issue, and users are r...
