79503 matches found
CVE-2026-48416
CVE-2026-48416 affects Adobe Commerce with an Incorrect Authorization vulnerability (CWE-863) that could allow an attacker to bypass security controls and gain unauthorized read access. The issue reportedly requires no user interaction and has a CVSS v3.1 base score of 7.5 (HIGH) , with a network...
CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction...
CVE-2026-70336
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-70337
Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network...
CVE-2026-70313
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-70314
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-69306
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70306
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-69306
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-68819
Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network...
CVE-2026-68806
Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-66301
Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...
CVE-2026-65768
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network...
CVE-2026-65769
Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network...
CVE-2026-65675
No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-65681
Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...
CVE-2026-63524
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-62893
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...