596185 matches found
CVE-2026-65658
CVE-2026-65658 involves a deserialization vulnerability in Microsoft Office SharePoint that can allow an authorized attacker to execute arbitrary code over the network. The published description identifies deserialization of untrusted data as the root cause, with the CVSS 3.1 base score of 8.8 (H...
CVE-2026-65658 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
EUVD-2026-56418
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-62913
CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...
EUVD-2026-56413
Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-56410
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56409
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
EUVD-2026-56408
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56407
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-56404
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-62893
CVE-2026-62893 affects Windows Deployment Services’ TFTP Server. The provided sources confirm a use-after-free defect that enables an unauthenticated, remote attacker to execute code over the network. CVSSv3.1 base score is 9.8 (CRITICAL) with network exploitation, no user interaction, and impact...
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-62892 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
...
CVE-2026-62892
CVE-2026-62892 is a use-after-free vulnerability in the Capability Access Management Service (camsvc) that could allow an authorized attacker to elevate privileges locally. The publicly available data identifies a local attack vector with high impact (confidentiality, integrity, and availability)...
EUVD-2026-56401
Double free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...