EUVD-2026-73010

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69528

CVE-2026-69528 is a local privilege escalation vulnerability in Windows Shell caused by missing authentication for a critical function . An authorized attacker (with low privileges, no user interaction required) can exploit this to gain full control over confidentiality, integrity, and availabili...

EUVD-2026-72968

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69415

Windows DHCP Server contains a missing authentication for critical function vulnerability that allows an authorized attacker (high privileges required) to elevate privileges over a network . The CVSS 3.1 score is 6.8 (MEDIUM) with vector AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H, indicating that user i...

Windows DHCP Server Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...

Windows Power Dependency Coordinator Tampering Vulnerability

Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...

Windows Cloud Files Mini Filter Driver Tampering Vulnerability

Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally...

Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

Azure AI Language Elevation of Privilege Vulnerability

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

Windows Autopilot Tampering Vulnerability

Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...

Windows Internet Connection Sharing (ICS) Tampering Vulnerability

Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...

Microsoft Windows Search Component Tampering Vulnerability

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

Windows Shell Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77097 Private Metrics Server Denial of Service

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77097

Commvault Private Metrics Server is affected by a missing authentication condition that impacts the metrics upload functionality, allowing an unauthenticated network-based attacker to cause a denial of service (high availability impact, low integrity impact). The CNA (Commvault) rates this CVSS 4...

EUVD-2026-72725

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77097 Private Metrics Server Denial of Service

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-19397

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...

CVE-2026-19397

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a direct connection to the agent when the host has an active login session. Refer to the ' Security Update for ASUS Control Center Express Agent '...