258161 matches found
CVE-2026-75715: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-75713: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-75712: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-75709: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
CVE-2026-77892: Protection Mechanism Failure
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-76968: Exposure of Sensitive System Information to an Unauthorized Control Sphere
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...
CVE-2026-33388: Incorrect Authorization
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential value...
CVE-2026-76931: Improper Neutralization of Input During Web Page Generation
The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level...
CVE-2026-71342: Use After Free
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69334: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-69331: Use After Free
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69315: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...
CVE-2026-69582: Buffer Over-read
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69281: Use After Free
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69468: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69455: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-69418: Heap-based Buffer Overflow
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-71343: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...
CVE-2026-69771: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...