5099 matches found
Microsoft Power Apps < 3.26085.3.0 Remote Code Execution (October 2026)
The Windows 'Microsoft Power Apps' app installed on the remote host is prior to version 3.26085.3.0. It is, therefore, affected by a remote code execution vulnerability: - Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network. CVE-2026-70213...
CVE-2026-108452
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
EUVD-2026-102464
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-115254
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute code over a network...
PT-2026-114316
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
CVE-2026-88084
Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...
EUVD-2026-100619
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-88084
A Denial of Service (DoS) vulnerability exists in Microsoft SQL Server due to the allocation of resources without limits or throttling . An authorized attacker can exploit this flaw over a network to disrupt service availability. Microsoft has released updates to address this issue, including KB5...
EUVD-2026-100711
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
EUVD-2026-100604
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-97842
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97834
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97836
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97838
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97835
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97829
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97823
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97822
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...