CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability

...

CVE-2026-54981

The CVE-2026-54981 entry concerns the Visual Studio Code Python extension, where inclusion of functionality from an untrusted control sphere leads to a local security feature bypass. Affected component: VS Code Python extension; root cause described as untrusted control sphere function inclusion....

CVE-2026-70327 Microsoft Excel Information Disclosure Vulnerability

...

CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-69306

CVE-2026-69306 affects Visual Studio Code; it describes an insecure failure mode where the product does not fail securely, allowing an unauthorized attacker to bypass a security feature over a network. The CVSS v3.1 base score is 8.2 (High): Network attack vector, low attack complexity, no privil...

CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-69278

CVE-2026-69278 affects Visual Studio Code. The issue is described as incorrect authorization that allows an unauthorized attacker to bypass a security feature locally. According to the metrics, the CVSS‑3.1 base score is 7.8 (HIGH), with local attack vector, no privileges required, and user inter...

EUVD-2026-56562

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-69278 Visual Studio Code Security Feature Bypass Vulnerability

...

CVE-2026-66799

CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...

CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability

...

CVE-2026-62915

Technical details about this CVE are not publicly provided in the supplied documents. Monitor for updates from vendors and security feeds for affected product, component, and remediation.

EUVD-2026-56417

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...

CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability

...

CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability

...

CVE-2026-62899

CVE-2026-62899 involves inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in .NET, allowing an unauthenticated attacker to bypass a security feature over a network. The vulnerability affects .NET components handling HTTP semantics and could allow bypassing safeguards ...

CVE-2026-62899 .NET Security Feature Bypass Vulnerability

...

CVE-2026-62899 .NET Security Feature Bypass Vulnerability

...

CVE-2026-62722 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2026-61936

CVE-2026-61936 describes a local security bypass in the Windows Defender Firewall Service where missing authorization allows an authorized attacker to bypass a security feature locally. The NVD entry and CVE records corroborate this description. According to the provided metrics, the impact is hi...