CVE-2026-45462

The CVE-2026-45462 entry describes an XSS vulnerability in Microsoft Office SharePoint where improper neutralization of input during web page generation can enable spoofing over a network. According to the connected records, impact is limited to spoofing with Confidentiality/Integrity/Availabilit...

CVE-2026-48578

CVE-2026-48578 describes a protection mechanism failure in Windows Secure Boot that can allow an authorized attacker to bypass a security feature locally. The available data indicate a local attack vector with high impact on confidentiality and integrity (CVSS 3.1: AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H...

CVE-2026-48576

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

CVE-2026-48575

CVE-2026-48575 describes a protection mechanism failure in Windows Secure Boot that allows an authorized, local attacker to bypass a security feature. The vulnerability enables a local escalation path with high impact on confidentiality and integrity (base score 7.9; AV:L/AC:L/PR:H/UI:N/S:C/C:H/I...

CVE-2026-48570

CVE-2026-48570 concerns a protection mechanism failure in Windows Secure Boot that could allow an authorized attacker with HIGH privileges to bypass a security feature locally (local attack, no user interaction). The CVSS 3.1 vector is AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N with a base score of 7.9 ...

CVE-2026-48573

CVE-2026-48573 describes a protection mechanism failure in Windows Secure Boot allowing an authorized attacker to bypass a security feature locally. The NVD entry notes a local attack vector with high impact on confidentiality and integrity (C:H/I:H) and a CVSS v3.1 base score of 7.9. Connected d...

CVE-2026-48568

CVE-2026-48568 concerns a protection mechanism failure in Windows Secure Boot that allows a local attacker to bypass a security feature. The connected sources indicate an in-scope vulnerability where an attacker with HIGH privileges and local access can bypass integrity and confidentiality protec...

CVE-2026-47641

CVE-2026-47641 concerns Microsoft Office SharePoint where improper neutralization of input during web page generation enables cross-site scripting. The underlying flaw is input not being properly sanitized, potentially allowing an authorized attacker to spoof content over a network. According to ...

CVE-2026-47636

CVE-2026-47636: Improper neutralization of input during web page generation (XSS) in Microsoft Office SharePoint. Descriptions indicate an authorised attacker could perform spoofing over the network by exploiting input handling during page rendering. Affected product: Microsoft SharePoint Server;...

CVE-2026-47636

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-41098

Azure Stack Edge is affected by CVE-2026-41098 due to improper neutralization of input during web page generation, enabling cross-site scripting. The vulnerability is exploitable by an authorized attacker over the network to perform spoofing. The CVSS 3.1 metrics indicate a high-impact, network-e...

CVE-2026-47288

CVE-2026-47288 affects Windows Kerberos Key Distribution Center (KDC). The vulnerability is an integer overflow/wraparound in the Kerberos code, enabling an authorized attacker on an adjacent network to execute code. The CVE has a CVSSv3.1 score of 7.1 ( HIGH ) with attack vector Adjacent, high i...

CVE-2026-45656

CVE-2026-45656 involves a protection mechanism failure in Windows UEFI that allows an authorized attacker to bypass a security feature locally. The CVSSv3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The attack is local with low complexity and requires low priv...

CVE-2026-45640

CVE-2026-45640 : Use-after-free in the Windows Bluetooth Port Driver enables a locally authenticated attacker to achieve privilege escalation. Affected: Windows Bluetooth Port Driver component. Root cause: use-after-free vulnerability as described. Impact: local privilege escalation with high imp...

CVE-2026-45605

CVE-2026-45605 is a Windows Bluetooth Service use-after-free vulnerability that allows an authorized, locally located attacker to escalate privileges. The CVSS 3.1 base score is 7.8 (High) with local attack vector, low attack complexity, and no user interaction; impact includes confidentiality, i...

CVE-2026-45503

CVE-2026-45503 is an SSRF vulnerability in Microsoft Exchange Server that could allow an authorized attacker to disclose information over a network. The provided documents cite CVSSv3.1 base metrics: 8.1 (High), with NETWORK attack vector, LOW attack complexity, Privileges Required: LOW, no user ...

CVE-2026-45453

CVE-2026-45453 affects Microsoft Office SharePoint Server and stems from improper neutralization of input during web page generation, enabling an authorized attacker to perform spoofing over a network via a cross-site scripting (XSS) flaw. The vulnerability involves the web-page generation compon...

CVE-2026-33828

CVE-2026-33828 affects Windows Device Health Attestation (DHA). The vulnerability is a trust boundary violation in Windows Attestation that allows an authorized local attacker to elevate privileges. CVSS v3.1 base metrics indicate high impact to confidentiality, integrity, and availability with l...

CVE-2026-45479

The CVE-2026-45479 entries describe an XSS vulnerability in Microsoft Office SharePoint where improper neutralization of input during web page generation can enable an authorized attacker to perform spoofing over the network. Affected product is SharePoint/SharePoint Server; the root cause is lac...

CVE-2026-45468

CVE-2026-45468 involves an improper neutralization of input during web page generation (XSS) in Microsoft Office SharePoint / SharePoint Server . An authorized attacker can perform spoofing over a network by targeting affected SharePoint web pages. The CVSS 3.1 base score is 4.6 (Medium); attack ...