95 matches found
no-gdid
no-gdid Read, understand, and silence the Windows Global Device Identifier GDID — the hidden per-account device ID that helped the FBI locate a suspect who was using a VPN. ⚠️ Honest disclaimer up front: this tool does not erase your GDID and does not make you anonymous. The GDID lives on...
CLEANSTART-2026-HB26759 Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant)
Security vulnerability affects the keycloak package. Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant...
CVE-2026-68852
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
CVE-2026-68850
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
CVE-2026-68852
Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...
EUVD-2026-73411
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
CVE-2026-68850
This vulnerability is a heap-based buffer overflow in Microsoft Account that allows an attacker with existing low-level access to locally elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity and low privileges required, resulting in high imp...
EUVD-2026-73410
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
Microsoft Account Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
Microsoft Account Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
PT-2026-87289
Name of the Vulnerable Software and Affected Versions Microsoft Account affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource. This issue allows the attacker to obtain sensitive data and potentiall...
CVE-2026-68852: Use of Uninitialized Resource
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
CVE-2026-68850: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
PT-2026-87287
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
BIT-KEYCLOAK-2026-18215 Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...
EUVD-2026-48452
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-56165
CVE-2026-56165: Heap-based buffer overflow in Microsoft Account enables remote code execution over a network. Affected: Microsoft Account service. Root cause: heap-based overflow (details not provided). Impact: high (confidentiality, integrity, availability). CVSS v3.1 base score 9.8 (CRITICAL); ...
