CVE-2026-59113

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-59113

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-48375

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user...

CVE-2026-47704

TypeBot is a chatbot builder tool. Prior to version 3.17.0, an authenticated user who has read access to any typebot can resume a waiting webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign live resultId. The webhook resume handler...

CVE-2026-40375

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

CVE-2026-25652

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction...

CVE-2026-58639

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

EUVD-2026-56680

Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56659

Incorrect authorization in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to disclose information locally...

EUVD-2026-56592

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

EUVD-2026-56591

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

EUVD-2026-56562

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-56417

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...

EUVD-2026-56340

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...

EUVD-2026-56331

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-59113

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

EUVD-2026-56304

Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network...

EUVD-2026-56299

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

CVE-2026-40375

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network...

EUVD-2026-56296

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...