917 matches found
CVE-2025-43929
CVE-2025-43929 Proof-of-concept for CVE-2025-43929, a high-severity vulnerability in KiTTY allowing for local executables to be ran without user confirmation under certain circumstances Vulnerability Type CWE-346: CWE-346 Origin Validation Error Vulnerability Description openactions.py in kitty...
CVE-2026-109461
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
EUVD-2026-102952
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
CVE-2026-109461
An origin validation error exists in the Microsoft Authentication Library (MSAL) for Node.js . This vulnerability allows an unauthorized attacker to perform information disclosure over a network. The CVSS 3.1 base score is 5.9 (Medium), with a high impact on confidentiality and high attack comple...
PT-2026-115975
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability
Origin validation error in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to disclose information over a network...
Security Updates for Azure DevOps CLI Extension (October 2026)
The Azure DevOps CLI extension for Microsoft Azure CLI installed on the remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability: - Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a...
CVE-2026-97381
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...
CVE-2026-97381 Legacy Update ActiveX control accepts unauthorized hosting origins
Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted method of its ActiveX control. After successfully reading the hosting document's hostname, a hostname that is not on the...
CVE-2026-97381
Legacy Update versions 1.12.0 through 1.13.1 are vulnerable to an origin validation error in the IsPermitted method of its ActiveX control. Due to a logic flaw, hostnames not on the permitted list fail to trigger an E_ACCESSDENIED error, causing the method to incorrectly return S_OK. An attacker ...
CVE-2026-88132
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...
CVE-2026-70213
Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...
CVE-2026-69877
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...
CVE-2026-96238
A vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network due to an origin validation error . This flaw enables an attacker to skip security measures with a CVSS 3.1 score of 6.5. No specific versions or remediation details are provided in the documents.
CVE-2026-96234
An origin validation error in .NET allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the NCSC advisory. Exploitation details are not provided.
CVE-2026-96234
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-96238
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-88132
An origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. This vulnerability is classified as an Access to Sensitive Data issue with a CVSS v3.1 score of 5.9 (Medium) . Microsoft has released updates to address this vulnerability; users ...