CVE-2026-48385

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

CVE-2026-47299

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-48362

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitatio...

CVE-2026-47285

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-47285

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-65673

Technical details about CVE-2026-65673 are not publicly available in the provided documents. Monitor for updates.

EUVD-2026-56588

Improper neutralization of special elements used in an os command 'os command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally...

CVE-2026-70335

The CVE-2026-70335 entry concerns an os command injection in GitHub Copilot and Visual Studio Code due to improper neutralization of special elements. This allows a local attacker to achieve elevation of privileges. The public records identify affected products (GitHub Copilot and VS Code) and de...

EUVD-2026-56561

Improper neutralization of special elements used in an os command 'os command injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

CVE-2026-69320

CVE-2026-69320 concerns Visual Studio Code. The issue is an improper neutralization of special elements used in an OS command (OS command injection) that could allow an unauthorized attacker to execute code remotely over a network. Affected product is Visual Studio Code; the root cause is imprope...

EUVD-2026-56451

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-68792

CVE-2026-68792 concerns a Microsoft Office command-injection vulnerability (improper neutralization of special elements used in a command) that allows an authorized, local attacker with low privileges and no user interaction to achieve local privilege elevation. Impacted aspects: confidentiality,...

CVE-2026-65656

CVE-2026-65656 concerns a Microsoft Office vulnerability where improper neutralization of special elements used in a command (command injection) can let an attacker with local access execute code locally. The issue is described as a local, user-interaction-requiring flaw with a CVSS v3.1 base sco...

EUVD-2026-56427

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-47285

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56306

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-47285

CVE-2026-47285 describes an information-disclosure vulnerability in Visual Studio Code due to improper neutralization of special elements used in a command (command injection). The NVD entry and CVE records state that an unauthorized attacker could disclose information over a network. The CVSS 3....

EUVD-2026-56305

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-47299

CVE-2026-47299 involves the Azure Monitor Agent and is due to improper neutralization of special elements used in a command (command injection). The vulnerability could allow an authorized attacker to elevate privileges over a network, with network as the attack vector, no user interaction requir...

CVE-2026-47299

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...