596087 matches found
CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability
...
CVE-2026-58641 .NET Elevation of Privilege Vulnerability
...
CVE-2026-42976
This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...
EUVD-2026-56603
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
...
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
...
EUVD-2026-56601
Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
EUVD-2026-56595
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...
CVE-2026-66804
Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.
CVE-2026-65806
CVE-2026-65806 affects Azure CycleCloud. The issue is missing authorization that could allow an attacker with LOW privileges and network access to disclose information, with confidentiality impact rated HIGH. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N and the base score ...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
EUVD-2026-56591
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
EUVD-2026-56589
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
EUVD-2026-56585
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
EUVD-2026-56583
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
