6128 matches found
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass
A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...
Security information for Hitachi Disk Array Systems
Overview CVE-2025-54518 | AMD: CVE-2025-54518 CPU OP Cache Corruption CVE-2026-21530 | Windows Rich Text Edit Elevation of Privilege Vulnerability CVE-2026-32161 | Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability CVE-2026-32170 | Windows Rich Text Edit Elevation of Privileg...
Windows Backup Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via XAML parsing in Windows Presentation Foundation WPF. An attacker can elevate privileges by supplying specially crafted XAML input that is improperly processed by a vulnerable WPF application. Successful...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via XAML parsing in Windows Presentation Foundation WPF. An attacker can elevate privileges by supplying specially crafted XAML input that is improperly processed by a vulnerable WPF application. Successful...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via XAML parsing in Windows Presentation Foundation WPF. An attacker can elevate privileges by supplying specially crafted XAML input that is improperly processed by a vulnerable WPF application. Successful...
Authentication Bypass by Assumed-Immutable Data
Overview Affected versions of this package are vulnerable to Authentication Bypass by Assumed-Immutable Data via improper parsing in the ASP.NET Core Negotiate authentication handler. An attacker can elevate privileges by supplying crafted authentication data that is parsed incorrectly, allowing...
PT-2026-58894
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-47300
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
EUVD-2026-44146
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...
EUVD-2026-44130
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-44088
Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-44056
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...
EUVD-2026-43912
Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...