4843 matches found
Windows Container Manager Service Security Feature Bypass Vulnerability
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...
KLA91272 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...
KLA91271 Multiple vulnerabilities in Microsoft SQL Server
Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...
CVE-2026-77111: Incorrect Authorization
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...
CVE-2026-69674: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
CVE-2026-69793: Improper Validation of Consistency within Input
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-75726: Improper Input Validation
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...
CVE-2026-77110: Improper Limitation of a Pathname to a Restricted Directory
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the...
CVE-2026-77774: Incorrect Authorization
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...
CVE-2026-79904: Improper Limitation of a Pathname to a Restricted Directory
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...
CVE-2026-69792: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...
CVE-2026-70334: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
PT-2026-88275
Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Magento Open Source affected versions not specified Adobe Commerce B2B affected versions not specified Description An incorrect authorization issue allows a remote attacker to bypass security...
PT-2026-88273
Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Magento Open Source affected versions not specified Adobe Commerce B2B affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Pat...
PT-2026-88274
Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Magento Open Source affected versions not specified Adobe Commerce B2B affected versions not specified Description An incorrect authorization issue allows a remote attacker with high privileges to...
CVE-2026-81997: Incorrect Authorization
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...
CVE-2026-81357: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
KLA91266 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...
CVE-2026-81378: Interpretation Conflict
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
APSB26-136 : Security update available for Adobe Photoshop Mobile
Adobe has released an update for Photoshop Mobile for Android. This update resolves important vulnerabilities that could result in security feature bypass and privilege escalation. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...