|
951
|
5.5 |
MEDIUM
Local
|
-
|
-
|
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-45634
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
952
|
6.8 |
MEDIUM
Local
|
-
|
-
|
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-45608
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
953
|
7.5 |
HIGH
Network
|
-
|
-
|
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-45591
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
954
|
7.5 |
HIGH
Network
|
-
|
-
|
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
New
|
CWE-94
Code Injection
|
CVE-2026-45583
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
955
|
8.8 |
HIGH
Network
|
-
|
-
|
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-45504
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
956
|
5.0 |
MEDIUM
Network
|
-
|
-
|
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-45502
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
957
|
6.1 |
MEDIUM
Network
|
-
|
-
|
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-45500
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
958
|
6.2 |
MEDIUM
Local
|
-
|
-
|
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
New
|
CWE-59
Link Following
|
CVE-2026-45491
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
959
|
7.8 |
HIGH
Local
|
-
|
-
|
Improper authorization in .NET allows an authorized attacker to elevate privileges locally.
New
|
CWE-285
Improper Authorization
|
CVE-2026-45490
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
960
|
8.8 |
HIGH
Network
|
-
|
-
|
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
New
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-45484
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|