305463 matches found
CVE-2026-42976
This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
...
CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
...
CVE-2026-70355
CVE-2026-70355 affects Microsoft Office SharePoint/SharePoint Server; improper neutralization of input during web page generation (XSS) could allow an authorized attacker to elevate privileges over the network. The CVSSv3.1 base score is 7.3 (HIGH) with NETWORK attack vector, LOW attack complexit...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70355 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-70324
CVE-2026-70324 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint that allows an authorized attacker to elevate privileges over a network. Affected product: SharePoint server components; root cause is SSRF enabling privilege escalation. The CVSSv3.1 score is 8.8 (HIGH) ...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
EUVD-2026-56447
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813
SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...
CVE-2026-65811
CVE-2026-65811 : This entry concerns Power BI with an issue described as improper input validation that allows an authorized attacker to execute code over a network. The CVSS 3.1 vector is AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). Affected component and root cause are stated onl...
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-65789
CVE-2026-65789 corresponds to a Windows DNS Server use-after-free vulnerability that enables remote code execution over a network. Based on the connected documents, the vulnerability is described as a use-after-free in Windows DNS which can allow an unauthorized attacker to execute code remotely....
CVE-2026-65665
CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...
CVE-2026-65665 Microsoft SharePoint Server Remote Code Execution Vulnerability
...