72956 matches found
CVE-2026-96855: Missing Authorization
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-70137: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
CVE-2026-96218: External Control of System or Configuration Setting
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
CVE-2026-88135: Missing Authorization
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...
PT-2026-112468
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper access control allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no information...
CVE-2026-96316: Missing Authorization
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
PT-2026-112868
Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description Improper access control in the Windows Broadcast DVR User Service allows an authorized attacker to disclose sensitive information locally, which can affect the...
CVE-2026-85938: Missing Authorization
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96855: Windows Modern Device Management (MDM) Tampering Vulnerability
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-70137: Missing Authentication for Critical Function
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
CVE-2026-17484 IBM i is Information Disclosure
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control...
CVE-2026-17484
IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a denial of service (DoS) condition caused by improper access control within Dedicated Service Tools (DST) or System Service Tools (SST). A local attacker could exploit this flaw to disrupt service availability. Remediation involves installi...
CVE-2023-54412
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to create and edit any Email Template. Attackers with low-privileged accounts, including self-registered users when signup is...
CVE-2026-109600 Frappe before 16.31.0 Improper Access Control in Document Follow Notifications
Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access...
CVE-2026-109600
The Frappe Framework is affected by an improper access control vulnerability in its Document Follow email notifications system. Specifically, versions before 15.118.0 and 16.x before 16.31.0 fail to verify if a user account is disabled before sending automated email updates. As a result, a disabl...
CVE-2026-109600 Frappe before 16.31.0 Improper Access Control in Document Follow Notifications
Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access...
CVE-2023-54412
The Frappe application (versions before 13.46.3 and 14.x before 14.21.1 ) contains an improper access control vulnerability within the Email Template permissions. This flaw allows any authenticated non-guest user , including low-privileged self-registered users, to create and edit any Email Templ...
CVE-2023-54412 Frappe before 13.46.3 Improper Access Control for Email Templates
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to create and edit any Email Template. Attackers with low-privileged accounts, including self-registered users when signup is...
CVE-2023-54412 Frappe before 13.46.3 Improper Access Control for Email Templates
Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to create and edit any Email Template. Attackers with low-privileged accounts, including self-registered users when signup is...