CVE-2026-79904: Improper Limitation of a Pathname to a Restricted Directory

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

CVE-2026-70309 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2026-70309

An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, indicating that exploitation requires user interaction and results in...

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-25250

EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...

EUVD-2026-67240

EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...

Microsoft Windows: CVE-2026-25250: MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix

EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...

MiracleLinux 8 : dotnet8.0-8.0.130-1.el8_10.ML.1 (AXSA:2026-1674:16)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1674:16 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

MiracleLinux 9 : dotnet9.0-9.0.120-1.el9_8.ML.1 (AXSA:2026-1650:17)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1650:17 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

MiracleLinux 9 : dotnet10.0-10.0.111-1.el9_8.ML.1 (AXSA:2026-1654:18)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1654:18 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

dotnet: .NET: Security feature bypass due to incorrect authorization

A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system...

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, a...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet: .NET: Security feature bypass due to incorrect authorization

A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet: .NET: Security feature bypass due to incorrect authorization

A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system...

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, a...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet: .NET: Security feature bypass due to incorrect authorization

A flaw was found in .NET where incorrect authorization allows an unauthorized attacker to bypass a security feature over a network. This vulnerability enables an attacker to circumvent intended security controls, potentially leading to unauthorized access or actions within the affected system...

Important: Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...