EUVD-2026-73588

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

CVE-2026-69277

CVE-2026-69277 is a stack-based buffer overflow in the Microsoft Local Security Authority Server (lsasrv) component that enables a locally authenticated attacker to escalate privileges . The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, and low privilege...

EUVD-2026-73376

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...

CVE-2026-66816

Microsoft SQL Server is affected by a security feature bypass vulnerability caused by insufficient logging , allowing an authorized attacker with low privileges to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a High confidentiality impa...

EUVD-2026-73335

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81379

Visual Studio Code is vulnerable to a security feature bypass caused by not failing securely ("failing open"), allowing an unauthorized network attacker to bypass a security control with low complexity and no privileges, though user interaction is required . The CVSS 3.1 score is 8.2 (HIGH) with ...

EUVD-2026-73334

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81378

An interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network . The vulnerability is rated CVSS 3.1: 8.2 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N , indicating that exploitation requires user interaction , results in ...

CVE-2026-81376

CVE-2026-81376 affects Visual Studio Code and stems from an incomplete comparison with missing factors , allowing an unauthorized attacker to bypass a security feature over a network. The vulnerability is rated CVSS 9.6 (CRITICAL) with a changed scope, requiring user interaction but no prior auth...

EUVD-2026-73332

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81356

Visual Studio Code is affected by an HTTP request/response smuggling vulnerability caused by inconsistent interpretation of HTTP requests. An unauthorized attacker can exploit this over a network to bypass a security feature , requiring user interaction. The Microsoft CVSS 3.1 score is 8.2 (HIGH)...

EUVD-2026-73331

Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-73330

Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81357

CVE-2026-81357 is a server-side request forgery (SSRF) vulnerability in Visual Studio Code that allows an unauthorized attacker to bypass a security feature over a network . The vulnerability requires user interaction but no prior privileges, and has a CVSS 3.1 score of 8.2 (HIGH) with high confi...

CVE-2026-78461

Visual Studio Code is affected by a path traversal vulnerability (improper limitation of a pathname to a restricted directory) that allows an unauthorized attacker to bypass a security feature over a network. The flaw requires user interaction but no prior authentication. Per the CNA (Microsoft),...

EUVD-2026-73297

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-73291

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-77899

CVE-2026-77899 is a use-after-free vulnerability in Windows Security Center that allows an authorized attacker to escalate privileges locally . The CVSS v3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the need for low privileges and high attack complexity...

EUVD-2026-73254

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-72980

CVE-2026-72980 affects Windows Hello on Microsoft Windows. The vulnerability is an uncontrolled search path element that allows an authorized, local attacker to bypass a security feature. The attack vector is local with low complexity and requires high privileges but no user interaction. The prim...