262 matches found
CVE-2026-66304
CVE-2026-66304 is a server-side request forgery (SSRF) vulnerability in Skype for Business Server , affecting the Subscription Edition , 2019 , and 2015 releases. An unauthorized remote attacker with no privileges required can exploit the flaw to disclose information over a network . The CVSS v3....
CVE-2026-77909
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...
CVE-2026-69507
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
CVE-2026-69393
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...
EUVD-2026-73336
Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
CVE-2026-69723
CVE-2026-69723 is an information disclosure vulnerability in the Windows Kernel . The flaw exposes sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (MEDIUM) with high confidentiality i...
CVE-2026-69552
CVE-2026-69552 affects Windows Print Spooler Components , where a flaw in the generation of error messages containing sensitive information allows an authorized attacker to disclose information over a network. The attack requires low privileges and user interaction , with a CVSS 3.1 score of 5.7 ...
CVE-2026-62902
A flaw was found in .NET. This vulnerability allows an unauthorized attacker to disclose sensitive information over a network. The issue arises from the inclusion of functionality from an untrusted control sphere, which can be exploited to reveal data. Mitigation No mitigation is needed. All...
CVE-2026-72848
SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...
EUVD-2026-56303
Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...
Azure Logic Apps Information Disclosure Vulnerability
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...
EUVD-2026-52526
Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-52529
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...
CVE-2026-66318
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-66314
Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-65802
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-49159
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
