WebDAV
by Microsoft
CVEs (13)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-88136 | Hig | 0.57 | 8.8 | — | Oct 13, 2026 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. | ||
| CVE-2026-70262 | Hig | 0.57 | 8.8 | — | Oct 13, 2026 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-102217 | Hig | 0.57 | 8.8 | — | Oct 13, 2026 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-96847 | Hig | 0.51 | 7.8 | — | Oct 13, 2026 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96843 | Hig | 0.51 | 7.8 | — | Oct 13, 2026 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88135 | Hig | 0.51 | 7.8 | — | Oct 13, 2026 | Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88126 | Hig | 0.51 | 7.8 | — | Oct 13, 2026 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85828 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85827 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-85370 | Hig | 0.45 | 7.0 | — | Oct 13, 2026 | Use after free in WebDAV allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-88137 | Med | 0.42 | 6.5 | — | Oct 13, 2026 | Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-87714 | Med | 0.42 | 6.5 | — | Oct 13, 2026 | Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. | ||
| CVE-2026-96846 | Med | 0.36 | 5.5 | — | Oct 13, 2026 | Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. |
- risk 0.57cvss 8.8epss —
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss —
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
- risk 0.57cvss 8.8epss —
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
- risk 0.51cvss 7.8epss —
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss —
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss —
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss —
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.45cvss 7.0epss —
Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
- risk 0.42cvss 6.5epss —
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss —
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
- risk 0.36cvss 5.5epss —
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.