Security Vulnerabilities
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.008
Published
2026-07-14
Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.
CVSS Score
8.4
EPSS Score
0.003
Published
2026-07-14
CVE-2026-50522
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Known exploited
CVSS Score
9.8
EPSS Score
0.571
Published
2026-07-14
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.011
Published
2026-07-14
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
CVSS Score
7.5
EPSS Score
0.008
Published
2026-07-14
Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.
CVSS Score
8.8
EPSS Score
0.007
Published
2026-07-14
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.2
EPSS Score
0.005
Published
2026-07-14
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVSS Score
8.8
EPSS Score
0.002
Published
2026-07-14
Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.004
Published
2026-07-14
Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.028
Published
2026-07-14