共收录 70327 条相关情报。
← 返回所有主题CVE-2026-103576
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthoriz
CVE-2026-103575
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-103572
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Managem
CVE-2026-103569
Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
CVE-2026-103568
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Provid
CVE-2026-103567
Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-103565
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-103560
Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.
CVE-2026-103558
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a netw
CVE-2026-103555
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privilege
CVE-2026-103554
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-103553
Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-102870
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute cod
CVE-2026-102869
Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker
CVE-2026-102867
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-102866
Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to eleva
CVE-2026-102865
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a netw
CVE-2026-102864
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
CVE-2026-102863
Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker t
CVE-2026-102862
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ