CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56590

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

CVE-2026-57104

CVE-2026-57104 is a cross-site scripting (XSS) flaw in Azure Storage Explorer where improper input neutralization during web page generation enables an unauthenticated remote attacker to elevate privileges over a network. Microsoft's MSRC update guide lists a fix; CISA's SSVC assessment shows no ...

CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

...

CVE-2026-65814 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

...

CVE-2026-65814

CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver enabling local privilege escalation for an authorized attacker. Documents provide only the generic impact; no specific affected Windows versions or patch details are available. Exploitation status is not described in the co...

EUVD-2026-56448

Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

...

CVE-2026-62695 Windows Storage Elevation of Privilege Vulnerability

...

CVE-2026-62695

CVE-2026-62695 is a Windows Storage vulnerability described as a heap-based buffer overflow that enables a locally authenticated attacker to elevate privileges. The linked metrics indicate a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges requ...

EUVD-2026-56342

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

EUVD-2026-56333

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally...

CVE-2026-20705

Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...

EUVD-2026-56471

Insecure storage of sensitive information in the IntelR TDX module for some IntelR platform within Ring 0: Trust Domain may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially...

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the Management GUI and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher. CVE-2026-19483, CVE-2026-13460 Vulnerability Details CVEID:CVE-2026-19483...

CVE-2026-47702

TypeBot is a chatbot builder tool. In version 3.16.1, API tokens bearer credentials used to authenticate against the builder API are stored in the database as cleartext strings. An attacker who gains read access to the database e.g., via SQL injection, backup exposure, or insider access can extra...

firefox: thunderbird: Information disclosure in the Storage: IndexedDB component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...

firefox: thunderbird: Information disclosure in the Storage: IndexedDB component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Storage: IndexedDB component...