6128 matches found
CVE-2026-62836: Improper Restriction of Communication Channel to Intended Endpoints
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65667: Missing Authorization
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65668: Improper Access Control
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...
CVE-2026-59118: Improper Authorization
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-20288
CVE-2026-20288 affects Cisco IMC’s web-based management interface. An authenticated Admin can exploit improper input validation to execute arbitrary commands on the underlying OS as root, elevating privileges. The Cisco bulletin lists a CVSS v3.1 base score of 6.5 (Medium) with network attack vec...
CVE-2026-59913
Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
EUVD-2026-52399
Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
EUVD-2026-52398
Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...
CVE-2026-40717
Dell Monitor driver 1.0.0.0 is affected by an Improper Link Resolution Before File Access ("Link Following") vulnerability. A low-privilege attacker with local access could potentially exploit this to achieve Elevation of Privileges. The connected sources provide the vendor advisory reference but...
CVE-2026-18571
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...
CVE-2026-22622
Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...
EUVD-2026-50610
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...
CVE-2026-28926
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4. An app may be able to elevate privileges...
BIT-DOTNET-SDK-2026-50650 .NET Framework Elevation of Privilege Vulnerability
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
PT-2026-65002
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
PT-2026-65020
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
ROS-20260727-73-0024
A vulnerability in httpd related to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their privileges...
PT-2026-65004
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
CVE-2026-56163
The vulnerability CVE-2026-56163 affects Microsoft Azure Kubernetes Service. It arises from missing authentication for a critical function, enabling an unauthenticated attacker to achieve network-based elevation of privilege within the service. The reported impact is high for confidentiality, int...
