Export limit exceeded: 424660 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424660 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424660 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424660 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-109460 | 1 Microsoft | 1 Entra Private Network Connector | 2026-11-11 | 5.5 Medium |
| Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows an authorized attacker to disclose information locally. | ||||
| CVE-2026-109464 | 1 Microsoft | 1 Sharepoint Server | 2026-11-11 | 8.8 High |
| Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-109466 | 1 Microsoft | 1 Sharepoint Server | 2026-11-11 | 8 High |
| Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network. | ||||
| CVE-2026-109472 | 1 Microsoft | 1 Sharepoint Server | 2026-11-11 | 8.8 High |
| Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-109481 | 1 Microsoft | 4 .net 11.0 Installed On Linux, .net 11.0 Installed On Mac Os, .net 11.0 Installed On Windows and 1 more | 2026-11-11 | 7.5 High |
| Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-109492 | 1 Microsoft | 1 Mcp Gateway | 2026-11-11 | 8.8 High |
| Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-108425 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-11 | 5.9 Medium |
| Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-109485 | 1 Microsoft | 1 Microsoft Agent Framework Sdk For Dotnet | 2026-11-11 | 6.3 Medium |
| Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-109487 | 1 Microsoft | 10 365 Apps, Microsoft Office Ltsc 2021, Microsoft Office Ltsc 2024 and 7 more | 2026-11-11 | 7.5 High |
| Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-105509 | 1 Microsoft | 2 Windows 11 26h1, Windows 11 26h1 | 2026-11-11 | 7 High |
| Use after free in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-105507 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.8 High |
| An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation. | ||||
| CVE-2026-105515 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.5 High |
| Buffer over-read in Windows Message Queuing allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-105520 | 1 Microsoft | 7 Windows Server 2016, Windows Server 2016 (server Core Installation), Windows Server 2019 and 4 more | 2026-11-11 | 7.2 High |
| Improper link resolution before file access ('link following') in Windows DNS allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-105524 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.8 High |
| Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-109473 | 1 Microsoft | 23 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 20 more | 2026-11-11 | 7.8 High |
| Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-108469 | 1 Microsoft | 1 Authentication Library For Javascript | 2026-11-11 | 6.8 Medium |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-109495 | 1 Microsoft | 1 Sharepoint Server | 2026-11-11 | 6.6 Medium |
| Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-109504 | 1 Microsoft | 1 Sharepoint Server | 2026-11-11 | 7.3 High |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-106137 | 2026-11-11 | 8.6 High | ||
| In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`. | ||||
| CVE-2026-62971 | 2026-11-11 | 7.2 High | ||
| The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 (protocol-attack), 930 (LFI), 931 (RFI), 932 (RCE), 933 (PHP), 934 (generic), 941 (XSS), 942 (SQLi), and 943 (session-fixation) families inspect XML request bodies via the XPath expression XML:/*. That expression matches only element text nodes — it does not match XML attribute values. As a result, an attacker who places an attack payload inside an XML attribute (e.g. <a href="javascript:alert(1)=window.name"></a> or <a value="' OR 1=1 --"></a>) bypasses CRS detection entirely. This is verified empirically against a local CRS test instance and against the public CRS sandbox. The bypass affects approximately 159 rules across 9 rule files and applies at every paranoia level (PL1 through PL4), since the variable list is more or less shared across PLs. The 944 (Java) family is the only one that correctly includes XML://@* in addition to XML:/* and is therefore unaffected. This issue has been patched in versions 3.3.10, 4.25.1, and 4.28.0. | ||||