CVE-2026-95631

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-92464

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-88132

Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network...

CVE-2026-83926

Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-70213

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-70194

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69877

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-109428

Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and bash in handling backslash-newline line continuations in the extractcommands function of bash.py...

CVE-2026-105719

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the Get method of the manifests type in registry/client/repository.go, which reads the response body and passes it to distribution.UnmarshalManifest without computing digest.FromBytesbody...

CVE-2026-110112 Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate th...

CVE-2026-97801

A vulnerability in the .NET Framework arises from the improper validation of specified type of input . This flaw allows an unauthorized attacker to perform tampering over a network . The vulnerability has a high base severity score of 7.5 (CVSS 3.1), with an impact primarily affecting integrity ....

CVE-2026-105007

An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) because ndis.sys fails to validate buffer length before copying memory. In a local attack scenario, an attacker with the ability to execute a malicious application could run a specially crafted app...

EUVD-2026-100204

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96234

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-100210

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-96238

A vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network due to an origin validation error . This flaw enables an attacker to skip security measures with a CVSS 3.1 score of 6.5. No specific versions or remediation details are provided in the documents.