EUVD-2026-100323

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

CVE-2026-96957

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96957

The .NET framework is affected by a vulnerability where improper verification of cryptographic signatures allows an unauthorized attacker to bypass a security feature over a network. This flaw can result in skipping security measures with a CVSS 3.1 score of 8.8. Remediation information is not ex...

EUVD-2026-100274

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96951

The Windows Shell is vulnerable to a security feature bypass (CVE-2026-96951) caused by improper neutralization of special elements used in a command (command injection). This flaw affects Windows 10 , Windows 11 , and certain Server versions , and was also identified in Outlook.com cloud service...

CVE-2026-96303

Microsoft PowerShell contains an improperly implemented security check for standard, which allows an unauthorized attacker to bypass a security feature over a network . The vulnerability is associated with CWE-358 and carries a CVSS 3.1 base score of 6.5 (Medium severity). The attack vector is Ne...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96238

A vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network due to an origin validation error . This flaw enables an attacker to skip security measures with a CVSS 3.1 score of 6.5. No specific versions or remediation details are provided in the documents.

CVE-2026-88210

A security feature bypass vulnerability exists in Microsoft Office Word due to the software's reliance on untrusted inputs in a security decision. An unauthorized attacker can exploit this flaw locally to bypass specific security protections. The impact of this vulnerability is classified as a by...

CVE-2026-69640

A security feature bypass vulnerability exists in the Windows Key Distribution Center due to incorrect authorization (CWE-863). This flaw allows an authorized attacker to bypass a security feature over a network. The vulnerability has a CVSS 3.1 base score of 5.3 (Medium) , with high confidential...

CVE-2026-59116

Windows Remote Desktop is susceptible to a security feature bypass due to the use of a broken or risky cryptographic algorithm (CWE-327). An unauthorized attacker can exploit this flaw over a network to bypass specific security features. The vulnerability has a CVSS 3.1 score of 6.8 (Medium) , wi...

CVE-2026-70188

A vulnerability in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network due to the inconsistent interpretation of HTTP requests (HTTP request/response smuggling). The vulnerability is listed with a CVSS score of 9.10 and results in the exploitation of security ...

CVE-2026-87714

A missing authorization vulnerability in WebDAV allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-862 and has been assigned a CVSS 3.1 base score of 6.5 (MEDIUM) . The impact is primarily on integrity . No specific affected version...

CVE-2026-85939

A weak authentication vulnerability in the Windows Kernel allows an authorized attacker to bypass a security feature over a network. The vulnerability is associated with CWE-1390 and carries a Medium severity rating. While the impact is noted as High for integrity , the documents do not provide s...

CVE-2026-85865

The Windows DHCP Server is susceptible to an improper authentication vulnerability, which allows an authorized attacker to bypass a security feature locally. The vulnerability is associated with CWE-288 (Authentication Bypass Using an Alternate Path or Channel). Exploitation details are not provi...

CVE-2026-85805

A security flaw in Windows PowerShell arises from an improperly implemented security check for standard. This vulnerability allows an unauthorized attacker to bypass a security feature over a network. The impact is characterized as having high integrity impact with a CVSS 3.1 base score of 6.5 . ...

CVE-2026-83787

The Windows DHCP Server is affected by a vulnerability involving insufficient verification of data authenticity . This flaw allows an authorized attacker to perform a local security feature bypass . The vulnerability is associated with CWE-288 (Authentication Bypass Using an Alternate Path or Cha...

CVE-2026-81964

The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...

EUVD-2026-99036

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-102231

A security feature bypass vulnerability exists in Visual Studio Code due to the improper resolution of path equivalence . This flaw allows an unauthorized attacker to bypass local security features. The vulnerability has been identified by Microsoft and is categorized under CWE-41 . While the spe...