Microsoft SharePoint: CVE-2026-70298: Microsoft Office SharePoint Information Disclosure Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

Microsoft .NET: CVE-2026-70161: .NET Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69923: Windows AI Elevation of Privilege Vulnerability

Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally...

Microsoft SharePoint: CVE-2026-69943: Microsoft Office SharePoint Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83865: Windows Internet (wininet.dll) Tampering Vulnerability

Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-83784: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70142: Windows Update Service Elevation of Privilege Vulnerability

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69979: Windows AppX Deployment Service Security Feature Bypass Vulnerability

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-69973: Windows libarchive Tampering Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...

Microsoft Windows: CVE-2026-69968: Windows libarchive Tampering Vulnerability

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...

Microsoft VS Code: CVE-2026-102238: Visual Studio Code Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Microsoft VS Code: CVE-2026-102229: Visual Studio Code Information Disclosure Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...

CVE-2026-103847: Untrusted Search Path

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to...

CVE-2026-103845: Uncontrolled Search Path Element

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-110235: Improper Limitation of a Pathname to a Restricted Directory

MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting fil...

CVE-2026-110232: Improper Limitation of a Pathname to a Restricted Directory

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../ x/file to create or overwrite files in sibling folder...

CVE-2026-110231: Improper Limitation of a Pathname to a Restricted Directory

muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...

CVE-2026-110212: Improper Limitation of a Pathname to a Restricted Directory

Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write uploaded files outside the media directory via the subDir parameter of POST /api/storage/upload. Attackers can supply parent-directory sequences that...

CVE-2026-108463: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...