CVE-2026-79904 Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

CVE-2026-79904 Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

EUVD-2026-73925

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

CVE-2026-73025

CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...

EUVD-2026-73778

Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-73019

CVE-2026-73019 involves an improper resolution of path equivalence in the Windows URL Moniker component, allowing an unauthorized attacker to bypass a security feature over a network. The vulnerability requires user interaction and grants low confidentiality impact with no integrity or availabili...

EUVD-2026-73754

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69792

CVE-2026-69792 is a race condition in Windows Win32K caused by concurrent execution of a shared resource with improper synchronization. An authorized local attacker with low privileges and high attack complexity can bypass a security feature , resulting in a HIGH integrity impact with no confiden...

EUVD-2026-73610

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...

EUVD-2026-73604

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69793

CVE-2026-69793 is a security feature bypass vulnerability in Windows TCP/IP , caused by improper validation of consistency within input. An unauthorized, unauthenticated attacker can exploit it over a network with no user interaction to achieve high impact on integrity (no confidentiality or avai...

CVE-2026-69713

CVE-2026-69713 is a security feature bypass in Windows Secure Boot caused by a dependency on a vulnerable third-party component . An authorized attacker with high privileges can exploit this vulnerability locally to bypass a security feature, resulting in a high integrity impact but no confidenti...

EUVD-2026-73588

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...

CVE-2026-66816

Microsoft SQL Server is affected by a security feature bypass vulnerability caused by insufficient logging , allowing an authorized attacker with low privileges to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium) with a High confidentiality impa...

EUVD-2026-73376

Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network...

EUVD-2026-73335

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81379

Visual Studio Code is vulnerable to a security feature bypass caused by not failing securely ("failing open"), allowing an unauthorized network attacker to bypass a security control with low complexity and no privileges, though user interaction is required . The CVSS 3.1 score is 8.2 (HIGH) with ...

EUVD-2026-73334

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81378

An interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network . The vulnerability is rated CVSS 3.1: 8.2 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N , indicating that exploitation requires user interaction , results in ...

CVE-2026-81376

CVE-2026-81376 affects Visual Studio Code and stems from an incomplete comparison with missing factors , allowing an unauthorized attacker to bypass a security feature over a network. The vulnerability is rated CVSS 9.6 (CRITICAL) with a changed scope, requiring user interaction but no prior auth...