dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-66304

CVE-2026-66304 is a server-side request forgery (SSRF) vulnerability in Skype for Business Server , affecting the Subscription Edition , 2019 , and 2015 releases. An unauthorized remote attacker with no privileges required can exploit the flaw to disclose information over a network . The CVSS v3....

CVE-2026-77909

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network...

CVE-2026-69507

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

CVE-2026-69393

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...

EUVD-2026-73336

Improper neutralization of special elements used in a command 'command injection' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-69723

CVE-2026-69723 is an information disclosure vulnerability in the Windows Kernel . The flaw exposes sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information over a network. The CVSS 3.1 score is 5.7 (MEDIUM) with high confidentiality i...

CVE-2026-69552

CVE-2026-69552 affects Windows Print Spooler Components , where a flaw in the generation of error messages containing sensitive information allows an authorized attacker to disclose information over a network. The attack requires low privileges and user interaction , with a CVSS 3.1 score of 5.7 ...

Microsoft SQL Server Information Disclosure Vulnerability

Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...

Windows Compressed Folder Information Disclosure Vulnerability

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

Microsoft Windows Search Component Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

PT-2026-87527

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

CVE-2026-67383: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2026-62902

A flaw was found in .NET. This vulnerability allows an unauthorized attacker to disclose sensitive information over a network. The issue arises from the inclusion of functionality from an untrusted control sphere, which can be exploited to reveal data. Mitigation No mitigation is needed. All...

CVE-2026-72848

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

CVE-2026-72848: Server-Side Request Forgery (SSRF)

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

CVE-2026-74247: Server-Side Request Forgery (SSRF)

A flaw was found in Red Hat Quay. A user with FEATUREBUILDSUPPORT enabled and repository write access can exploit a Server-Side Request Forgery SSRF vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network...

EUVD-2026-56303

Server-side request forgery ssrf in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network...

Azure Logic Apps Information Disclosure Vulnerability

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

EUVD-2026-52526

Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...