CVE-2026-50302

CVE-2026-50302 is a Windows Cryptographic Services security feature bypass caused by improper certificate validation, allowing a network-based attacker to bypass a security feature. The CVSS v3.1 base score is 4.2 (Medium) with network attack vector and user interaction required. Microsoft and se...

CVE-2026-50303 Windows Key Guard Security Feature Bypass Vulnerability

...

CVE-2026-50295 Windows Zero Trust DNS Security Feature Bypass Vulnerability

...

CVE-2026-50295

Technical details about CVE-2026-50295 are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-50295

Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally...

CVE-2026-49783 Secure Boot Security Feature Bypass Vulnerability

...

CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability

...

CVE-2026-58614 Windows Kernel Security Feature Bypass Vulnerability

...

CVE-2026-57097

CVE-2026-57097 describes an Untrusted search path in Microsoft XML that allows a physical attacker to bypass a security feature. Affects Microsoft XML; impact is described as high for confidentiality, integrity, and availability with a physical attack requiring no user interaction. No exploit det...

CVE-2026-57097

Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack...

Visual Studio Code Security Feature Bypass Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network...

Windows BitLocker Security Feature Bypass Vulnerability

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Visual Studio Code Security Feature Bypass Vulnerability

Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Windows Kernel Security Feature Bypass Vulnerability

Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally...

Windows Key Guard Security Feature Bypass Vulnerability

Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally...

Windows Cryptographic Services Security Feature Bypass Vulnerability

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

Windows Kernel Security Feature Bypass Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally...

CVE-2026-48000: URL Redirection to Untrusted Site

Adobe Commerce is affected by an Improper Redirect Open Redirect vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim...

CVE-2026-48312: Improper Input Validation

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...