All CVEs — page 641 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
This flaw allows a local, low-privileged attacker to escape file isolation and escalate privileges by modifying security descriptors of virtualized files, potentially leading to SYSTEM-level access.
The flaw allows restricted code to escape the sandbox by accessing standard library functions and classes, leading to potential RCE, data leakage, and integrity issues.
The flaw in Keycloak's policy enforcer allows an authenticated user to manipulate web addresses with special encoded characters, potentially bypassing intended security policies and gaining unauthorized access.
The flaw allows an attacker to inject executable JavaScript via SVG xlink:href, leading to potential code execution in the page origin.
The flaw in the rmcp crate's OAuth implementation allows a malicious MCP server to trick a victim into obtaining a legitimate access token, which can then be captured and used by the attacker to impersonate the victim.