Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVEs (5,470)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-47301 1Microsoft 3Configuration Manager 2503 Configuration Manager 2509Configuration Manager 2603 Jul 15, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.
CVE-2026-58617 1Microsoft 1365 Copilot Jul 16, 2026 Jul 14, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-58545 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jul 17, 2026 Jul 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.
CVE-2026-57088 1Microsoft 4Windows 10 1809 Windows Server 2019Windows Server 2022+1 more Jul 23, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally.
CVE-2026-56157 1Microsoft 1Sharepoint Server Jul 15, 2026 Jul 14, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-50495 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jul 22, 2026 Jul 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
CVE-2026-50465 1Microsoft 4Windows 11 24h2 Windows 11 25h2Windows 11 26h1+1 more Jul 22, 2026 Jul 14, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
CVE-2026-50423 1Microsoft 7Windows 10 21h2 Windows 10 22h2Windows 11 24h2+4 more Jul 22, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-50418 1Microsoft 5Windows 11 24h2 Windows 11 25h2Windows 11 26h1+2 more Jul 22, 2026 Jul 14, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-50373 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jul 22, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-50335 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jul 23, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.
CVE-2026-55014 - - Jul 23, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.
CVE-2026-50351 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jul 23, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.
CVE-2026-50342 1Microsoft 3Windows 11 24h2 Windows 11 25h2Windows 11 26h1 Jul 23, 2026 Jul 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-50325 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jul 22, 2026 Jul 14, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-50311 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jul 22, 2026 Jul 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.
CVE-2026-50297 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jul 22, 2026 Jul 14, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-49805 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jul 22, 2026 Jul 14, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-15677 - - Jul 14, 2026 Jul 14, 2026 5.5 MEDIUM· v4 7.3 HIGH· v3 7.5 HIGH· v2 A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload....Show more A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.Show less
CVE-2026-15627 - - Jul 14, 2026 Jul 14, 2026 2.1 LOW· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl lead...Show more A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used.Show less

Previous 1 234 5...274 Next