70941 matches found
CVE-2026-77897
CVE-2026-77897 is a relative path traversal vulnerability in Microsoft Power Automate Desktop that allows an authorized attacker to escalate privileges locally . The vulnerability requires local access with low privileges and has a high attack complexity, as reflected by the CVSS 3.1 score of 7.0...
EUVD-2026-73721
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-73680
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-68896
CVE-2026-68896 is an absolute path traversal vulnerability in the Microsoft Windows Search Component that allows an authorized local attacker to achieve privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with a CVSS 3.1 base score...
EUVD-2026-73625
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-69807
Windows PowerShell is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 8.0 (HIGH) , with a vector of AV:N/AC:L/PR:L/UI:R/...
EUVD-2026-73543
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69612
CVE-2026-69612 is an absolute path traversal vulnerability in Windows Error Reporting that allows an authorized attacker to elevate privileges locally . The flaw resides in how the component handles file paths, permitting traversal beyond the intended directory. The CVSS 3.1 score is 7.8 (HIGH) w...
EUVD-2026-73508
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
CVE-2026-69445
CVE-2026-69445 is a local privilege escalation vulnerability in Windows Compressed Folder caused by an improper limitation of a pathname to a restricted directory (path traversal ). An authorized attacker with low privileges can exploit this locally without user interaction to achieve high impact...
EUVD-2026-73333
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to perform tampering over a network...
CVE-2026-81377
Visual Studio Code is affected by a path traversal vulnerability that allows an unauthorized attacker to perform tampering over a network. The attack vector is network-based with low complexity and no required privileges, but user interaction is required . The impact is rated HIGH for integrity ,...
EUVD-2026-73297
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-78461
Visual Studio Code is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an unauthorized attacker to bypass a security feature over a network. The flaw requires user interaction but no prior authentication. Per the CNA (Microsoft),...
CVE-2026-72948
CVE-2026-72948 is a relative path traversal vulnerability in Windows DNS that allows an authorized attacker to escalate privileges locally . Microsoft rates it MEDIUM (CVSS 6.7) requiring high privileges, while NVD assigns HIGH (7.8) with low privileges required. CISA's SSVC assesses no known exp...
EUVD-2026-73114
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73177
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62801
CVE-2026-62801 is a path traversal vulnerability in Windows PowerShell that allows an unauthorized, remote attacker to bypass a security feature. The improper limitation of a pathname to a restricted directory means an attacker can reference files or resources outside the intended directory. The ...
GHSA-3GQ4-3J92-5W49 NLTK: Corpus Reader Sandbox Bypass
Summary NLTK corpus-reader constructors can still reach outside-root file and database reads before the nltk.pathsec sandbox boundary is enforced. The PoC shows the safe path blocked by pathsec.open, then LinThesaurusCorpusReader and PanLexLiteCorpusReader succeeding in the same process. Affected...