All CVEs — page 41 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
A code injection vulnerability (CWE-94) in Visual Studio Code enables remote code execution via network exposure due to improper control of code generation. An unauthenticated attacker can leverage this flaw with user interaction to execute arbitrary code in the context of the affected application.
A flaw in Microsoft Office SharePoint's authorization logic allows an authenticated, low-privilege user to gain elevated privileges over the network due to improper access control checks. This enables unauthorized administrative actions or data access beyond the user's assigned permissions.
A critical missing authentication vulnerability (CWE-306) in Azure OpenAI allows unauthenticated remote attackers to perform privileged operations over the network. This enables full compromise of confidentiality, integrity, and availability due to the lack of any access control on a sensitive function.