305448 matches found
EUVD-2026-56635
Integer underflow wrap or wraparound in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network...
CVE-2026-62720 Windows DHCP Server Information Disclosure Vulnerability
...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-61920
CVE-2026-61920 – Windows DNS Server : A race condition caused by improper synchronization on a shared resource enables an authorized attacker to execute code over a network. Affected product: Windows DNS Server. Root cause: concurrent execution due to lack of proper synchronization in the shared ...
CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-42976
This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
...
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
...
CVE-2026-70355
CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-70324
CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
EUVD-2026-56447
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813
SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...
CVE-2026-65811
CVE-2026-65811 : This entry concerns Power BI with an issue described as improper input validation that allows an authorized attacker to execute code over a network. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). Affected component and root cause are stated onl...