414385 matches found
CVE-2026-102863
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-102862
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-102857
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...
CVE-2026-102858
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...
CVE-2026-102864
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-102599
Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO protocol revision from the upgrade request instead of enforcing the revision stored on the existing session. A malicious...
CVE-2026-102850
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-102849
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
CVE-2026-102856
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...
CVE-2026-102851
Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...
CVE-2026-102232
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102231
Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102226
Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...
CVE-2026-102229
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...
CVE-2026-102233
Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-102225
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-102227
Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...
CVE-2026-102217
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...
CVE-2026-102218
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-102215
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-102216
Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...
CVE-2026-102221
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-102220
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...
CVE-2026-102207
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-102210
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
CVE-2026-102209
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
CVE-2026-102208
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
CVE-2026-102214
Use after free in Windows Hyper-V allows an authorized attacker to execute code locally...
CVE-2026-102211
Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-102201
Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally...
CVE-2026-102202
Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-102203
Access of resource using incompatible type 'type confusion' in RPC Runtime allows an unauthorized attacker to execute code over a network...
CVE-2026-102204
Improper link resolution before file access 'link following' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
CVE-2026-102206
Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-102205
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-102195
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102199
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network...
CVE-2026-102198
Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network...
CVE-2026-102194
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-102196
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102197
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102191
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-102193
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-102192
Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...
CVE-2026-102187
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally...
CVE-2026-102189
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...
CVE-2026-102188
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-100220
Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network...