146598 matches found
CVE-2026-62828
Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...
CVE-2026-62828 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
...
Chromium: CVE-2026-15767 Heap buffer overflow in libyuv
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Improper Authentication
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Authentication through the Microsoft account token exchange flow in the Microsoft identity provider...
Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections
Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations...
PT-2026-65516
Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network...
Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts
Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens...
BIT-DOTNET-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
PT-2026-65020
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
Уязвимость пакетов программ Microsoft Office, Word и 365 Apps for Enterprise, позволяющая нарушителю выполнить произвольный код
Уязвимость пакетов программ Microsoft Office, Word и 365 Apps for Enterprise связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
CVE-2026-57990
Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
Exploit for Improper Authorization in Microsoft
Certighost Slidev deck This directory contains the Slidev pre...
CVE-2026-57990 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
EUVD-2026-49059
Files or directories accessible to external parties in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57990
CVE-2026-57990 affects Microsoft Edge (Chromium-based). The vulnerability is described as an information disclosure where files or directories accessible to external parties allow an unauthorized attacker to disclose information over a network. The published CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:R...
CVE-2026-57990 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
EUVD-2026-49058
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57989 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
CVE-2026-57989
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57989
CVE-2026-57989 affects Microsoft Edge (Chromium-based). The provided documents describe an origin validation error that allows an unauthorized attacker to disclose information over a network. The NVD entry and MSRC page confirm the same description; no specific exploit vectors, affected product v...