277888 matches found
CVE-2026-87709
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...
CVE-2026-87695
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-85938
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-83864
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-83854
Improper access control in Windows Notification allows an authorized attacker to disclose information locally...
CVE-2026-83658
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-83568
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-70267
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-70217
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-70137
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
CVE-2026-70096
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network...
CVE-2026-70093
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...
CVE-2026-70084
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...
CVE-2026-110226
QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned hotels by supplying an arbitrary idhotel. Attackers can enumerate all hotels via the unfiltered room type form selector and post foreign...
CVE-2026-110229
QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund...
CVE-2026-110111
Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...
CVE-2026-105733
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-110111
Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...
UBUNTU-CVE-2026-110111
Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and vm.importMultipleFromEsxi methods. Attackers can point xo-server at a malicious ESXi host serving a craft...