CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-110202 HIGH · 8.8 Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by prefixing them with a…
- CVE-2026-110130 CRITICAL · 10.0 Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as…
- CVE-2026-110112 HIGH · 8.1 Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp…
- CVE-2026-110111 HIGH · 7.5 Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importFromEsxi and…
- CVE-2026-110036 LOW · 3.3 A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process…
- CVE-2026-109453 HIGH · 7.0 Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-109429 HIGH · 8.8 Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a…
- CVE-2026-109428 HIGH · 8.8 Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between tree-sitter-bash and…
- CVE-2026-108471 HIGH · 8.8 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-108468 HIGH · 7.0 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-108467 HIGH · 8.8 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
- CVE-2026-108466 MEDIUM · 5.3 Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
- CVE-2026-108465 HIGH · 7.0 Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
- CVE-2026-108464 HIGH · 7.0 Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
- CVE-2026-108463 HIGH · 8.8 Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-108462 MEDIUM · 5.5 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-108461 HIGH · 7.0 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-108460 HIGH · 8.1 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
- CVE-2026-108458 HIGH · 8.8 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-108457 HIGH · 8.1 Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
- CVE-2026-108400 HIGH · 8.8 Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
- CVE-2026-108399 HIGH · 7.2 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- CVE-2026-108398 HIGH · 8.8 Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.
- CVE-2026-108396 HIGH · 7.0 Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. Microsoft
- CVE-2026-108136 HIGH · 7.8 Gebruik na gratis in Microsoft Windows Search Component stelt een geautoriseerde aanvaller in staat om de privileges lokaal te verhogen. Microsoft
- CVE-2026-108135 HIGH · 7.0 Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. Microsoft
- CVE-2026-108134 HIGH · 7.0 Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
- CVE-2026-108133 HIGH · 7.8 Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
- CVE-2026-108132 HIGH · 7.0 Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. Microsoft
- CVE-2026-108131 HIGH · 7.5 No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-108130 HIGH · 7.8 Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-108129 MEDIUM · 6.5 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-108128 MEDIUM · 6.5 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-108127 MEDIUM · 6.5 Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-107607 MEDIUM · 6.2 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network…
- CVE-2026-107606 MEDIUM · 6.2 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network…
- CVE-2026-107605 MEDIUM · 6.2 SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network…
- CVE-2026-106625 HIGH · 7.8 Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of…
- CVE-2026-105733 HIGH · 8.8 Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
- CVE-2026-105732 HIGH · 7.3 Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
- CVE-2026-105731 MEDIUM · 5.5 Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.
- CVE-2026-105729 HIGH · 7.1 Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
- CVE-2026-105728 HIGH · 7.5 Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.
- CVE-2026-105727 HIGH · 8.8 Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
- CVE-2026-105726 MEDIUM · 5.5 Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.
- CVE-2026-105725 HIGH · 7.0 Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. Microsoft
- CVE-2026-105723 HIGH · 7.5 Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-105722 HIGH · 7.0 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-105720 MEDIUM · 4.3 Onjuiste autorisatie in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om privileges over een netwerk te verhogen. Microsoft
- CVE-2026-105719 MEDIUM · 6.5 Onjuiste invoervalidatie in Microsoft Office SharePoint stelt een geautoriseerde aanvaller in staat om informatie via een netwerk bekend te maken. Microsoft