CVE-2026-88136

An untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in the code that processes WebDAV requests.

Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

A heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in code that processes data in heap memory.

Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

Use after free in WebDAV allows an authorized attacker to elevate privileges locally.