146262 matches found
CVE-2026-56191
Technical details about CVE-2026-56191 are not provided in the connected documents. Public information here only cites improper authentication and tampering risk for Microsoft Exchange Online. Monitor for updates from official advisories.
CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability
...
EUVD-2026-48458
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability
...
EUVD-2026-48457
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...
EUVD-2026-48456
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
CVE-2026-50517
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...
CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability
...
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
...
CVE-2026-49159
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
CVE-2026-49159 Microsoft Graph Information Disclosure Vulnerability
...
CVE-2026-50517 Microsoft M365 Copilot Remote Code Execution Vulnerability
...
CVE-2026-49159
Technical details about CVE-2026-49159 are not publicly available in the provided documents. No vendor-specific impact, affected products, or remediation details are included. Monitor for updates from the sources.
CVE-2026-50517
CVE-2026-50517 describes a deserialization vulnerability in Microsoft 365 Copilot (M365 Copilot) that enables an authorized attacker to execute code over the network. The issue is triggered by deserializing untrusted data, with a critical CVSS v3.1 score (9.9, CRITICAL) and a network attack vecto...
PT-2026-64817
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over a network. Origin validation is a security mechanism used to verify that a request...
PT-2026-64203
Name of the Vulnerable Software and Affected Versions Microsoft M365 Copilot affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object,...
PT-2026-64818
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Origin validation is a security mechanism used to verify that a reques...
ROS-20260724-73-0030
The vulnerability of the Microsoft .NET and Microsoft .NET Framework software platforms is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
PT-2026-64202
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
CVE-2026-56165
CVE-2026-56165: Heap-based buffer overflow in Microsoft Account enables remote code execution over a network. Affected: Microsoft Account service. Root cause: heap-based overflow (details not provided). Impact: high (confidentiality, integrity, availability). CVSS v3.1 base score 9.8 (CRITICAL); ...