Lucene search
+L

264543 matches found

CVE
CVE
added 5 days ago109 views

CVE-2026-62896

Technical details for CVE-2026-62896 are not publicly available in the provided documents; no affected versions, components, or fixes are specified. Monitor for updates from MSRC/NVD.

9.6CVSS5.5AI score0.00381EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 5 days ago35 views

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

8.7CVSS0.00359EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago75 views

CVE-2026-62836

CVE-2026-62836 affects Azure SQL Managed Instance. The vulnerability arises from improper restriction of the communication channel to intended endpoints, enabling a network-based elevation of privileges by an unauthenticated attacker. Affected products include Azure SQL Managed Instance (and rela...

10CVSS5.7AI score0.00359EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 5 days ago9 views

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

8.7CVSS5.7AI score0.00359EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago13 views

CVE-2026-7867

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

7.8CVSS0.00175EPSS
SaveExploits0References4
NVD
NVD
added 5 days ago8 views

CVE-2026-67687

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

8.8CVSS0.00527EPSS
SaveExploits1References2
NVD
NVD
added 5 days ago7 views

CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00295EPSS
SaveExploits0References2
OSV
OSV
added 5 days ago6 views

DEBIAN-CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.3AI score0.00295EPSS
SaveExploits0References1
OSV
OSV
added 5 days ago5 views

DEBIAN-CVE-2026-19139

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

7.4CVSS5.3AI score0.00085EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago8 views

CVE-2026-19139

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

7.4CVSS0.00085EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago7 views

CVE-2026-18367

A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6...

9.3CVSS0.00131EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago9 views

CVE-2025-15674

The Passster WordPress plugin before 4.3.7 does not restrict low-privilege users holding the editposts capability from reading globally password-protected content through the WordPress core REST API when global protection is enabled, allowing any Contributor or higher to read the content of...

2.7CVSS0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago28 views

CVE-2026-48086 OpenReception: Tenant admin self-promotes to GLOBAL_ADMIN

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANTADMIN promotes themselves to platform-wide GLOBALADMIN through a single PUT request. The role-update handler accepts the GLOBALADMIN enum value from any tena...

9.9CVSS0.00334EPSS
SaveExploits0References2
Cvelist
Cvelist
added 5 days ago29 views

CVE-2026-19139

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

0.00085EPSS
SaveExploits0References2
CVE
CVE
added 5 days ago73 views

CVE-2026-19139

CVE-2026-19139 describes a race in CredentialProvider in Google Chrome on Windows that could allow a local attacker to achieve OS‑level privilege escalation via a malicious file. Affected software: Google Chrome for Windows prior to version 151.0.7922.109. Root cause: race condition in Credential...

7.4CVSS5.5AI score0.00085EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 5 days ago7 views

CVE-2026-19139

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

7.4CVSS5.2AI score0.00085EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 5 days ago10 views

CVE-2026-19139

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

5.5AI score0.00085EPSS
SaveExploits0References2
Cvelist
Cvelist
added 5 days ago27 views

CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

0.00295EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 5 days ago6 views

CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.3AI score0.00295EPSS
SaveExploits0
CVE
CVE
added 5 days ago70 views

CVE-2026-19169

CVE-2026-19169 refers to insufficient validation of untrusted input in Chrome’s Contextual Tasks, allowing remote privilege escalation via a crafted HTML page. Affected product: Google Chrome; affected versions are prior to 151.0.7922.109. Remediation: update to Chrome 151.0.7922.109 or later (St...

8.8CVSS5.5AI score0.00295EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder