Search Results (44668 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-70049 1 Microsoft 3 Configuration Manager 2503, Configuration Manager 2509, Configuration Manager 2603 2026-10-13 8 High
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
CVE-2026-88198 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70266 1 Microsoft 1 Sharepoint Server 2026-10-13 8.8 High
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70267 1 Microsoft 1 Sharepoint Server 2026-10-13 7.2 High
Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-70068 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 8.8 High
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-85938 1 Microsoft 9 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 6 more 2026-10-13 5.5 Medium
Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-70270 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-13 5.5 Medium
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70172 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 7.8 High
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70170 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 6.5 Medium
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
CVE-2026-70098 1 Microsoft 1 Visual Studio Code 2026-10-13 8.8 High
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-88162 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-13 5.5 Medium
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
CVE-2026-69971 1 Microsoft 5 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 2 more 2026-10-13 5.5 Medium
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-69850 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-13 7.8 High
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
CVE-2026-105720 1 Microsoft 1 Sharepoint Server 2026-10-13 4.3 Medium
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-85355 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 7 High
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70299 1 Microsoft 2 Windows 11 23h2, Windows Server 2025 2026-10-13 8.8 High
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70275 1 Microsoft 15 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 12 more 2026-10-13 8.8 High
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-83826 1 Microsoft 6 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 3 more 2026-10-13 7.8 High
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83658 1 Microsoft 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more 2026-10-13 5.5 Medium
Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
CVE-2026-83583 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-13 7.8 High
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.