CVE-2026-88126

An untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in the code that processes WebDAV requests.

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

A heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in code that processes data in heap memory.

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Use after free in WebDAV allows an authorized attacker to elevate privileges locally.