CVE-2026-23658

Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to increase their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to incorrect restrictions on file names and other resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Microsoft System Center Operations Manager (SCOM) software for managing and monitoring IT services stems from insufficient validation of input data. This allows attackers to exploit their privileges.

The vulnerability of the Microsoft System Center Operations Manager SCOM software for managing and monitoring IT services is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Microsoft SQL Server database management system arises from incorrect validation of specified data types. This allows attackers to escalate their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to incorrect validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

CVE-2025-67298

CVE-2025-67298 affects ClasroomIO prior to v0.2.6. A remote attacker can escalate privileges through the endpoints /api/verify and /rest/v1/profile. The issue is classified as high severity (CVSS 3.1: 8.1, NETWORK, HIGH impact on confidentiality, integrity, and availability) with no user interact...

EUVD-2026-10839

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0113

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0110

In MMDATAIND of cnNrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0113

CVE-2026-0113 describes an out-of-bounds write in ns_GetUserData within ns_SmscbUtilities.c that could enable remote escalation of privilege without user interaction. Affected references across multiple feeds corroborate the same flaw and classify it as a high-severity issue with a common-criteri...

CVE-2026-0113

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0113

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0111

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0111

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0111

In nsGetUserData of nsSmscbUtilities.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0111

Google Pixel devices are affected by a High severity Elevation of Privilege (EoP) vulnerability (CVE-2026-0111) in the Cellular Modem subcomponent. The issue stems from an incorrect bounds check in the ns_GetUserData function within the ns_SmscbUtilities.c file, which can lead to an out-of-bounds...

CVE-2026-0110

In MMDATAIND of cnNrSmMsgHdlrFromMM.cpp, there is a possible EoP due to memory corruption. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...