70655 matches found
CVE-2026-70137
A vulnerability in Windows Remote Access Connection Manager involves improper access control , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit details or versions are pr...
CVE-2026-87710
A vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) due to improper access control . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-362 (Race Condition). No specific exploit details or mitigatio...
CVE-2026-85938
The Windows Broadcast DVR User Service is impacted by an improper access control vulnerability (CWE-862). This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability has been assigned a CVSS 3.1 base score of 5.5 (Medium) , with a high impact on con...
CVE-2026-83854
A vulnerability exists in Windows Notification due to improper access control , which allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-306 (Missing Authentication for Critical Function). A MEDIUM severity rating of 5.5 (CVSS 3.1) is assigned...
CVE-2026-83864
The Windows NTFS file system contains an improper access control vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the vulnerability is confirmed, the provided documents do not specify the exact component,...
CVE-2026-83658
A vulnerability exists in Windows Error Reporting due to improper access control . This flaw allows an authorized attacker to perform a local information disclosure . The impact is classified as high regarding confidentiality, with a CVSS 3.1 base score of 5.5. Remediation is available via an off...
CVE-2026-105733
A vulnerability exists in Windows Hyper-V due to improper access control . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-1419 (Incorrect Initialization of Resource) and carries a HIGH severity rating. No specific exploit details...
CVE-2026-102860
A privilege escalation vulnerability exists in Microsoft Office SharePoint due to improper access control . An authorized attacker can exploit this flaw over a network to gain elevated privileges. Microsoft has released updates to address this vulnerability; users are recommended to install the l...
EUVD-2026-99043
Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-110229 QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips
QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund...
CVE-2026-110229
Versions of QloApps through 1.7.0 are vulnerable to an improper access control flaw in the AdminSlipController component. This vulnerability allows hotel-restricted back-office employees to bypass restrictions and access credit slips from other hotels. An attacker can list, export as PDF, mark as...
CVE-2026-110229 QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips
QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels' refund...
CVE-2026-109958
EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read restricted emailAddress values via the address-book search API. Users with record access can query address-book search to obtain email addresses even when Roles restrict the...
Windows Error Reporting Information Disclosure Vulnerability
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally...
Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
Windows Broadcast DVR User Service Information Disclosure Vulnerability
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...
Windows Projected File System Information Disclosure Vulnerability
Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...