35806 matches found
CVE-2026-72966
CVE-2026-72966 affects Windows Remote Access Connection Manager , where a missing authorization check allows an already-authorized (low-privilege) local attacker to perform tampering without user interaction. The impact is rated HIGH for integrity with no effect on confidentiality or availability...
CVE-2026-69453
CVE-2026-69453 is a missing authorization vulnerability in the Microsoft Windows Search Component that allows an authenticated, low-privilege local attacker to perform tampering (integrity impact). The CVSS 3.1 base score is 5.5 (Medium) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, indica...
EUVD-2026-73510
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
EUVD-2026-73479
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...
CVE-2026-69403
CVE-2026-69403 is an information disclosure vulnerability in the Windows SMB Server component, caused by missing authorization that allows an authorized (low-privilege) local attacker to disclose information. The impact is limited to confidentiality with no integrity or availability impact. CNA-a...
CVE-2026-83942
CVE-2026-83942 is a Windows Kernel elevation of privilege vulnerability caused by a missing authorization check , allowing an attacker with low local privileges to gain full control of the system (high impact on confidentiality, integrity, and availability). The vulnerability carries a CVSS 3.1 b...
EUVD-2026-73339
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...
WordPress WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation vulnerability
Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation vulnerability discovered by Wordfence PRISM in WordPress Plugin WPFunnels versions = 3.12.13...
EUVD-2026-73155
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-69724
CVE-2026-69724 is a missing authorization vulnerability in Microsoft Office SharePoint that allows an authorized attacker to achieve remote code execution over a network. The Microsoft CNA rates it CVSS 3.1 Base 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attac...
CVE-2026-69641
CVE-2026-69641 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 9.1 (Critical) with a scope change, indicating high impact on confidentiality, integrity, and availability onc...
EUVD-2026-73146
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73129
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-69380
CVE-2026-69380 is a missing authorization vulnerability in Microsoft Exchange Server that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.1 (HIGH) , with high impact to confidentiality and integrity and no availability impact. Attack complexity is low, ...
EUVD-2026-73017
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network...
CVE-2026-69553
CVE-2026-69553 is a missing authorization vulnerability in Windows Hyper-V that allows an authorized attacker (with low privileges) to elevate privileges over a network . The attack requires user interaction and has high attack complexity , but the impact on confidentiality, integrity, and availa...
CVE-2026-69377
CVE-2026-69377 affects Windows Modern Device Management (MDM) , where a missing authorization check allows a low-privileged local attacker to escalate privileges with high impact on confidentiality, integrity, and availability. The assigned CVSS 3.1 score is 7.8 (HIGH) with the vector AV:L/AC:L/P...
EUVD-2026-73228
Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-83941
CVE-2026-83941 is a missing authorization vulnerability in Entra ID (Microsoft's identity and access management service) that allows an attacker with low privileges to elevate privileges over a network. The assigned CVSS 3.1 score is 9.9 (CRITICAL) with a scope change, indicating high impact on b...