289 matches found
EUVD-2026-74044
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
CVE-2026-69805
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62804
CVE-2026-62804 is an external control of file name or path vulnerability in Microsoft Office Word that allows an unauthorized attacker to execute code locally. The flaw requires user interaction (e.g., opening a crafted file) and no prior privileges, with high impact to confidentiality, integrity...
CVE-2026-69805
CVE-2026-69805 is an elevation of privilege vulnerability in Microsoft .NET , caused by external control of a file name or path . An unauthorized network-based attacker can exploit this to escalate privileges, with high impact on confidentiality, integrity, and availability. The CVSS 3.1 score is...
CVE-2026-69383
CVE-2026-69383 is a local elevation of privilege vulnerability in Windows Shell , caused by external control of file name or path . An authorized attacker with low privileges can exploit this to gain full control over confidentiality, integrity, and availability of the system (CVSS 3.1 base score...
EUVD-2026-73131
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-69355
CVE-2026-69355 is a Remote Code Execution vulnerability in Microsoft Exchange Server caused by external control of a file name or path . An authorized attacker with low privileges can exploit this over the network without user interaction, leading to high impact on confidentiality, integrity, and...
EUVD-2026-73124
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
Skype for Business Remote Code Execution Vulnerability
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
Windows Shell Elevation of Privilege Vulnerability
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Remote Code Execution Vulnerability
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
Microsoft Word Remote Code Execution Vulnerability
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...
.NET Elevation of Privilege Vulnerability
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...
PT-2026-87210
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Microsoft Exchange Server (September 2026)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. CVE-2026-55007 - External control of file name...
PT-2026-87731
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description External control of a file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version...
External Control of File Name or Path
Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to External Control of File Name or Path via the Downloader.download and Downloader.incrdownload file-write path in nltk/downloader.py. An attacke...
CVE-2026-53508: External Control of File Name or Path
oasdiff is a command-line and Go package that compares and detects breaking changes in OpenAPI specs. From version 1.13.2 through version 1.18.0, oasdiff did not enforce --allow-external-refs=false library: openapi3.Loader.IsExternalRefsAllowed = false when loading a spec from a git revision the...