109319 matches found
CVE-2026-56157
Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-54121
Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...
CVE-2026-50469
Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...
CVE-2026-50465
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...
CVE-2026-50418
Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-50403
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50373
Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-50365
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-50346
Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally...
CVE-2026-50344
Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally...
CVE-2026-50335
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
CVE-2026-50321
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-50317
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
CVE-2026-50302
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-15058
Improper authorization in the secure messages deletion endpoint in Devolutions Server 2026.2.11, 2026.1.22 allows an authenticated user to delete another user's messages via a direct object reference to the message identifier...
CVE-2026-15058
The CVE-2026-15058 affects Devolutions Server versions 2026.2.11 and 2026.1.22, where the secure messages deletion endpoint incorrectly authorizes access. An authenticated user can delete another user’s messages by directly referencing the message identifier, due to an improper authorization flaw...
tomcat-coyote: tomcat: Improper Authorization allows security bypass
In Apache Tomcat, when multiple security constraints defined an HTTP method constraint for the same extension pattern, only the first method constraint was applied. A remote attacker could exploit this to bypass intended security restrictions for information or actions within the application...
CVE-2026-58631
Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally...