146600 matches found
CVE-2026-26122 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2026-26122
CVE-2026-26122 is a Microsoft ACI Confidential Containers information disclosure vulnerability. Per the CVSS v3.1 metrics, it has a NETWORK attack vector, LOW attack complexity, LOW privileges required, no user interaction, and a HIGH confidentiality impact (C:H; I:N; A:N) with a base score of 6....
CVE-2026-26124 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-21536 Microsoft Devices Pricing Program Remote Code Execution Vulnerability
...
CVE-2026-26124
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-26124 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-21536
Microsoft Devices Pricing Program Remote Code Execution Vulnerability...
CVE-2026-21536 Microsoft Devices Pricing Program Remote Code Execution Vulnerability
...
CVE-2026-26124
CVE-2026-26124 concerns Microsoft ACI Confidential Containers with elevation of privilege in Azure Compute Gallery. The description indicates an authorized attacker can locally elevate privileges via a flaw described as '.../...//' in the Compute Gallery. Connected advisories show Microsoft fixed...
CVE-2026-21536
CVE-2026-21536 – Microsoft Devices Pricing Program is a remote code execution vulnerability in the Microsoft Devices Pricing Program. Technical detail from CNVD indicates a code issue caused by improper file upload checksums, enabling a remote attacker to upload malicious files and execute arbitr...
CVE-2026-23651
CVE-2026-23651 : A permissive regular expression in Azure Compute Gallery allows an authorized local attacker to elevate privileges. The entry provides a CVSS v3.1 base score of 6.7 (Medium), with local attack vector, high privileges required, no user interaction, and high impact on confidentiali...
CVE-2026-23651 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-28481 OpenClaw < 2026.2.1 - Bearer Token Leakage via MS Teams Attachment Downloader Suffix Matching
OpenClaw versions 2026.1.30 and earlier, contain an information disclosure vulnerability, patched in 2026.2.1, in the MS Teams attachment downloader optional extension must be enabled that leaks bearer tokens to allowlisted suffix domains. When retrying downloads after receiving 401 or 403...
CVE-2026-28481
OpenClaw (npm package) up to version 2026.1.30 contains an information disclosure vulnerability in the MS Teams attachment downloader (extension must be enabled). When retrying downloads after 401/403 responses, the code may send Authorization: Bearer tokens to untrusted hosts that match a permis...
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
Microsoft Devices Pricing Program Remote Code Execution Vulnerability
...
Microsoft ACI Confidential Containers Information Disclosure Vulnerability
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...