CVE Security

NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom pr...

Windows


                                    CVE-2026-9489

Lire l'article

unknown

31/05/2026

Vulnérabilité unknown détectée - CVE-2026-48831

Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configuratio...

Windows


                                    CVE-2026-48831

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-41104

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network.

Windows


                                    CVE-2026-41104

Lire l'article

medium 6.5

29/05/2026

Vulnérabilité medium détectée - CVE-2026-42827

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose inform...

Windows


                                    CVE-2026-42827

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-42901

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Windows


                                    CVE-2026-42901

Lire l'article

high 8.8

29/05/2026

Vulnérabilité high détectée - CVE-2026-45659

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Applications Windows


                                    CVE-2026-45659

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-47280

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

Windows


                                    CVE-2026-47280

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-40412

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.

Windows


                                    CVE-2026-40412

Lire l'article

critical 9.3

29/05/2026

Vulnérabilité critical détectée - CVE-2026-41090

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform ta...

Windows


                                    CVE-2026-41090

Lire l'article

high 8.8

29/05/2026

Vulnérabilité high détectée - CVE-2026-35430

Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges ove...

Windows


                                    CVE-2026-35430

Lire l'article

critical 9.9

29/05/2026

Vulnérabilité critical détectée - CVE-2026-40411

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.

Windows


                                    CVE-2026-40411

Lire l'article

critical 10

29/05/2026

Vulnérabilité critical détectée - CVE-2026-23652

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execut...

Windows


                                    CVE-2026-23652

Lire l'article

1 2 3