96599 matches found
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization through the ATTACH DATABASE process. An attacker can overwrite arbitrary files on the filesystem by sending crafted SQL commands to the server, potentially leading to execution of malicious code or disruption of...
CVE-2026-58613
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-58536
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-50401
Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally...
CVE-2026-50374
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack...
CVE-2026-45072 Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler fileexcerpt Twig filter escapes PHP files through highlightstring but interpolates lines from non-PHP files directly into...
CVE-2026-45072 Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.4.24 until 6.4.40, 7.4.12, and 8.0.12, the development profiler fileexcerpt Twig filter escapes PHP files through highlightstring but interpolates lines from non-PHP files directly into...
CVE-2026-50316
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the Files.php and Myfiles.php controllers, which insufficiently validate user-supplied paths by relying on prefix checks of the raw URL rather than resolving the canonical filesystem path. An attacker can access...
CVE-2026-58613
CVE-2026-58613 (Windows Cloud Files Mini Filter Driver) causes a local privilege escalation via a use-after-free in the driver. This is observed as an elevation of privileges by an authorized attacker who already has local access. Public sources in the connected documents identify the issue as a ...
CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
EUVD-2026-44304
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-58613 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-58536
CVE-2026-58536 : A use-after-free in Windows Cloud Files Mini Filter Driver allows an authorized local attacker to achieve elevation of privileges. Affected component: Windows Cloud Files Mini Filter Driver. Impact: local privilege escalation with high impact; exploit details are not provided in ...
CVE-2026-58536 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2026-50374
CVE-2026-50374 concerns the Windows Cloud Files Mini Filter Driver. The connected sources confirm a use-after-free condition in this driver that can be exploited by an authorized attacker to gain elevated privileges, with the exploitation described as requiring a physical attack. The impact is el...
CVE-2026-50374 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...