Security Vulnerabilities
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.024
Published
2026-08-11
Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVSS Score
6.5
EPSS Score
0.009
Published
2026-08-11
Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVSS Score
6.5
EPSS Score
0.006
Published
2026-08-11
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.004
Published
2026-08-11
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-08-11
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-08-11
Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.005
Published
2026-08-11
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS Score
8.1
EPSS Score
0.004
Published
2026-08-11
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.006
Published
2026-08-11
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
CVSS Score
8.8
EPSS Score
0.005
Published
2026-08-11