CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-68813 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-65675

Technical details (affected product/version, root cause, exploitability) are not publicly available in the provided documents; monitor for updates.

EUVD-2026-56437

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

...

EUVD-2026-56407

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability

...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability

...

CVE-2026-58650

CVE-2026-58650 describes an authorization bypass in Visual Studio Code triggered by a user-controlled key, enabling a local attacker to bypass a security feature. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with Local attack vector, Low attack complexity, and no privileges required, ...

CVE-2026-48437 CAI Content Credentials | Improper Certificate Validation (CWE-295)

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interactio...

CVE-2026-48437

CVE-2026-48437 affects CAI Content Credentials and is due to Improper Certificate Validation, enabling a security feature bypass and unauthorized write access. Exploitation requires user interaction (victim visits a malicious URL or interacts with a compromised page). CVSS 3.1 base score 5.5 (Med...

netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

A flaw was found in Netty. This vulnerability allows a remote attacker to perform request smuggling attacks due to incorrect parsing of malformed Transfer-Encoding headers. By exploiting this flaw, an attacker can bypass security controls and potentially access sensitive information or manipulate...

bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft CompositeVerifier implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially...

CVE-2026-48385 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

EUVD-2026-56549

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

CVE-2026-48385

CVE-2026-48385 affects ColdFusion and is described as an Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability that could bypass security features and grant unauthorized write access. The issue can be triggered remotely (attack vector: NETWORK) wit...

CVE-2026-48376

CVE-2026-48376 affects Adobe ColdFusion. The issue is an Improper Encoding or Escaping of Output vulnerability that enables a low-privileged, network-access attacker to bypass security measures and gain limited unauthorized write access, causing limited disruption to availability. The CVSS vector...

CVE-2026-48376 ColdFusion | Improper Encoding or Escaping of Output (CWE-116)

is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability...