Total
403507 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-24310 | 1 Sap | 1 Netweaver Application Server Abap | 2026-06-17 | N/A | 3.5 LOW |
| Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentiality with no effect on the integrity and availability. | |||||
| CVE-2026-24309 | 1 Sap | 1 Netweaver Application Server Abap | 2026-06-17 | N/A | 6.4 MEDIUM |
| Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced system performance or interruptions. The vulnerability has low impact on the application's integrity and availability, with no effect on confidentiality. | |||||
| CVE-2026-24307 | 1 Microsoft | 1 365 Copilot | 2026-06-17 | N/A | 9.3 CRITICAL |
| Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-24306 | 1 Microsoft | 1 Azure Front Door | 2026-06-17 | N/A | 9.8 CRITICAL |
| Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-24305 | 1 Microsoft | 1 Entra Id | 2026-06-17 | N/A | 9.3 CRITICAL |
| Azure Entra ID Elevation of Privilege Vulnerability | |||||
| CVE-2026-24303 | 1 Microsoft | 1 Partner Center | 2026-06-17 | N/A | 9.6 CRITICAL |
| Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-24302 | 1 Microsoft | 1 Azure Arc | 2026-06-17 | N/A | 8.6 HIGH |
| Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-24300 | 1 Microsoft | 1 Azure Front Door | 2026-06-17 | N/A | 9.8 CRITICAL |
| Azure Front Door Elevation of Privilege Vulnerability | |||||
| CVE-2026-24299 | 1 Microsoft | 1 365 Copilot | 2026-06-17 | N/A | 5.3 MEDIUM |
| Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-24297 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 4 more | 2026-06-17 | N/A | 6.5 MEDIUM |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kerberos allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-24296 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more | 2026-06-17 | N/A | 7.0 HIGH |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24295 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-06-17 | N/A | 7.0 HIGH |
| Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24292 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2026-06-17 | N/A | 7.8 HIGH |
| Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24291 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more | 2026-06-17 | N/A | 7.8 HIGH |
| Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24290 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2026-06-17 | N/A | 7.8 HIGH |
| Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24288 | 1 Microsoft | 2 Windows 10 21h2, Windows 10 22h2 | 2026-06-17 | N/A | 6.8 MEDIUM |
| Heap-based buffer overflow in Windows Mobile Broadband allows an unauthorized attacker to execute code with a physical attack. | |||||
| CVE-2026-24287 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2026-06-17 | N/A | 7.8 HIGH |
| External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24285 | 1 Microsoft | 14 365 Copilot, Windows 10 1607, Windows 10 1809 and 11 more | 2026-06-17 | N/A | 7.0 HIGH |
| Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24283 | 1 Microsoft | 5 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 2 more | 2026-06-17 | N/A | 8.8 HIGH |
| Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-24282 | 1 Microsoft | 8 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 5 more | 2026-06-17 | N/A | 5.5 MEDIUM |
| Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally. | |||||