70635 matches found
CVE-2026-100115
The CAI Content Credentials software is affected by an Improper Access Control vulnerability (CWE-284). This flaw allows an attacker to bypass security measures and gain unauthorized write access without requiring user interaction. The vulnerability has a base CVSS 3.1 score of 7.5 (HIGH) with a ...
CVE-2026-100115 CAI Content Credentials | Improper Access Control (CWE-284)
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interactio...
CVE-2026-105443
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.10 are affected by an improper access control vulnerability (CWE-284) characterized by insufficient isolation between servers sharing an installation. This issue specifically impacts instances with the restConnector-1.0 or ...
CVE-2026-105443 IBM WebSphere Application Server Liberty is affected by an improper access control
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install...
CVE-2026-96855
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-96316
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
CVE-2026-96218
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
CVE-2026-88135
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...
CVE-2026-88072
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
CVE-2026-87709
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...
CVE-2026-87710
Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-85938
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
CVE-2026-83864
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...
CVE-2026-83854
Improper access control in Windows Notification allows an authorized attacker to disclose information locally...
CVE-2026-83658
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...
CVE-2026-70217
Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
CVE-2026-70137
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
CVE-2026-70084
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...
CVE-2026-110229
QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund...