CVE-2026-70049

A SQL injection vulnerability exists in Microsoft Configuration Manager due to the improper neutralization of special elements used in an SQL command. This flaw allows an authorized attacker to elevate privileges over an adjacent network. The vulnerability is assigned a High base severity score. ...

CVE-2026-96204

A Server-side request forgery (SSRF) vulnerability exists in Azure Arc . This flaw allows an authorized attacker to achieve privilege escalation over a network. The vulnerability is associated with CWE-918 . Microsoft has provided updates to address this issue, and users are encouraged to install...

CVE-2026-70276

A Use after free vulnerability exists in Microsoft Office Click-To-Run , which may allow an authorized attacker to elevate privileges locally . This vulnerability is categorized with a CVSS 3.1 score of 7.0 (High) . Microsoft has released updates to address this issue; users are recommended to in...

CVE-2026-70251

A Server-side request forgery (SSRF) vulnerability exists in Microsoft Office SharePoint , as detailed in CVE-2026-70251 . This flaw allows an authorized attacker to achieve privilege escalation over a network. Microsoft has released official updates to address this issue; users are encouraged to...

CVE-2026-70179

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

CVE-2026-70183

Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70175

A vulnerability in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network due to improper authentication . The vulnerability has a CVSS 3.1 base score of 8.1 (High) . While the technical root cause and specific versions are not detailed in the provided documents, the im...

CVE-2026-70175

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70179

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70165

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70183

Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

CVE-2026-70179

A vulnerability in ASP.NET Core allows an authorized attacker to achieve elevation of privilege over a network. The root cause is an authentication bypass by spoofing (CWE-290). Exploitation details and specific affected versions are not provided in the documents, but the vulnerability carries a ...

CVE-2026-70110

A stack-based buffer overflow vulnerability exists in the Microsoft PostScript Printer Driver . This flaw allows an unauthorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , indicating significant impacts on confidentiality, integrity, and availability....

CVE-2026-70109

A heap-based buffer overflow exists in the Microsoft PostScript Printer Driver , which allows an unauthorized attacker to achieve local privilege elevation . The vulnerability is classified as a High severity issue (CVSS 3.1 score of 7.8). Official remediation is available via a Microsoft securit...

CVE-2026-70102

A Use after free vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause files are provided, but the impact is classified as high regarding confidentiality, integrity, and a...

CVE-2026-70068

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an unauthorized attacker to elevate privileges over a network. The issue involves a heap-based buffer overflow (CWE-122) and an untrusted pointer dereference (CWE-822). Exploitation de...

CVE-2026-70113

The Windows Client for NFS is vulnerable to an integer overflow or wraparound condition. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via Microsoft security updates.

CVE-2026-88107

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). Official remediation is available via...