#cwe-863

共收录 2098 条相关情报。

← 返回所有主题
安全公告2026-10-14 发布INFO

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local...

CVE-2026-110159

Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially ga...

CVE-2026-90532

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially ga...

CVE-2026-75732

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially ga...

CVE-2026-48383

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

来源摘录 · NVD

漏洞预警2026-10-13 发布CRITICAL

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially ga...

CVE-2026-48382

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code exe

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83792

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

CVE-2026-83766

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent n

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

CVE-2026-83764

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70299

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-70280

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-70229

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a netwo

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.

CVE-2026-70057

Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a se

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-105733

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-105720

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

CVE-2026-102865

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a netw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-102862

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a networ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-102232

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure ...

CVE-2026-93294

A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authoriz...

CVE-2026-15577

A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks witho...

CVE-2026-77459

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3

历史摘要 · 未重新核验 · NVD