12995 matches found
EUVD-2026-56767
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-62886 .NET Elevation of Privilege Vulnerability
...
CVE-2026-62782 Windows SMB Client Information Disclosure Vulnerability
...
CVE-2026-58641 .NET Elevation of Privilege Vulnerability
...
CVE-2026-54981 Visual Studio Code Python Extension Security Feature Bypass Vulnerability
...
CVE-2026-70335
The CVE-2026-70335 entry concerns an os command injection in GitHub Copilot and Visual Studio Code due to improper neutralization of special elements. This allows a local attacker to achieve elevation of privileges. The public records identify affected products (GitHub Copilot and VS Code) and de...
EUVD-2026-56563
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69306 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2026-68813 Microsoft Excel Information Disclosure Vulnerability
...
CVE-2026-65786 Desktop Window Manager Elevation of Privilege Vulnerability
...
EUVD-2026-56437
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-65675 CoPilot Chat Security Feature Bypass Vulnerability
...
CVE-2026-65675
Technical details (affected product/version, root cause, exploitability) are not publicly available in the provided documents; monitor for updates.
CVE-2026-62899
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-56407
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability
...
CVE-2026-59130
AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...
CVE-2026-63512 Microsoft SharePoint Server Tampering Vulnerability
...
CVE-2026-58650
CVE-2026-58650 describes an authorization bypass in Visual Studio Code triggered by a user-controlled key, enabling a local attacker to bypass a security feature. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with Local attack vector, Low attack complexity, and no privileges required, ...
CVE-2026-48436 CAI Content Credentials | Improper Input Validation (CWE-20)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...