216967 matches found
CVE-2026-48376
is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability...
CVE-2026-47285
Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-21269
ColdFusion is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable...
DEBIAN-CVE-2026-20783
Improper conditions check in the firmware for the IntelR NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may...
DEBIAN-CVE-2026-20769
Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-20778
Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...
CVE-2025-8087
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...
CVE-2025-31938
Insufficient granularity of access control in some subsystem for some IntelR XeonR 6 Scalable processors with IntelR TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentiall...
CVE-2025-54512
A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2026-50516
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-56777
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
EUVD-2026-56772
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
EUVD-2026-56773
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
EUVD-2026-56770
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
EUVD-2026-56769
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
EUVD-2026-56767
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70338
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...