35386 matches found
CVE-2026-14646
Nexus Repository 3 did not apply its existing Server-Side Request Forgery SSRF protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymo...
CVE-2026-58613
CVE-2026-58613 (Windows Cloud Files Mini Filter Driver) causes a local privilege escalation via a use-after-free in the driver. This is observed as an elevation of privileges by an authorized attacker who already has local access. Public sources in the connected documents identify the issue as a ...
EUVD-2026-44304
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-58536
CVE-2026-58536 : A use-after-free in Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve elevation of privileges. Affected component: Windows Cloud Files Mini Filter Driver. Impact: local privilege escalation with high impact; exploit details are not provided in ...
OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection
Summary OpenCost contains an unauthenticated file write vulnerability in the /serviceKey endpoint that allows remote attackers to overwrite the GCP service account key file without authentication. This can lead to service disruption, credential theft, and potential privilege escalation within...
GHSA-WMJ8-9953-VFF5 OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection
Summary OpenCost contains an unauthenticated file write vulnerability in the /serviceKey endpoint that allows remote attackers to overwrite the GCP service account key file without authentication. This can lead to service disruption, credential theft, and potential privilege escalation within...
CVE-2026-50374
CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...
CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-50401 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
...
CVE-2026-50401 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
...
CVE-2026-50401
CVE-2026-50401 describes an information disclosure in the Windows Cloud Files Mini Filter Driver due to an out-of-bounds read. The impact is local and depends on the attacker already having some level of privileges, with a high confidentiality impact reported in the CVE; the advisory notes an aut...
CVE-2026-57969 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-14646 Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect
Nexus Repository 3 did not apply its existing Server-Side Request Forgery SSRF protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymo...
CVE-2026-14646
Nexus Repository 3 contains an SSRF issue where existing SSRF protections are not applied to HTTP redirect targets from proxy upstreams. If a user with read access to a proxy repo backed by an attacker-controlled or compromised upstream server — including anonymous users when enabled — requests c...
