147748 matches found
Vulnerability of the user interface of Google Chrome and Microsoft Edge browsers, allowing a hacker to execute arbitrary code
The vulnerability of the user interfaces of Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Updater service for Google Chrome and Microsoft Edge allows a hacker to escalate their privileges.
The vulnerability of the Updater service for Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Media components in Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.
The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of these components. Exploiting this vulnerability could allow an attacker to bypass security restrictions from a remote location...
The vulnerability in the DataTransfer interface of Google Chrome and Microsoft Edge allows a hacker to gain access to and modify data.
The vulnerability of the DataTransfer interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to and modify data...
Vulnerability of the user interface of Google Chrome and Microsoft Edge browsers, allowing a hacker to execute arbitrary code
The vulnerability of the user interfaces of Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...
CVE-2026-45497
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an authorized attacker to execute code over a network...
CVE-2026-47655
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
CVE-2026-48579
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network...
CVE-2026-47655
CVE-2026-47655 describes an information-disclosure vulnerability in Microsoft Graph. An authorized attacker could disclose sensitive data over a network due to a root cause that enables exposure to an attacker with Network access, Low complexity and Low privileges, with no user interaction. The C...
CVE-2026-47655 Microsoft Graph Information Disclosure Vulnerability
...
CVE-2026-47655 Microsoft Graph Information Disclosure Vulnerability
...
CVE-2026-47655
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
CVE-2026-47644
Improper neutralization of special elements in output used by a downstream component 'injection' in Copilot Chat Microsoft Edge allows an unauthorized attacker to disclose information over a network...
CVE-2026-47644 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
...
CVE-2026-47644
CVE-2026-47644 affects Copilot Chat in Microsoft Edge. The issue is an improper neutralization of special elements in output used by a downstream component ("injection"), enabling an unauthorized attacker to disclose information over a network. The vulnerability is documented across multiple sour...
CVE-2026-47644 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
...
CVE-2026-42824
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-45497 Microsoft M365 Copilot Remote Code Execution Vulnerability
...
CVE-2026-45497
CVE-2026-45497 affects Microsoft Copilot (M365 Copilot). According to the description, it involves improper neutralization of special elements in a command (command injection) that could allow an authorized attacker to execute code over a network. The connected documents do not provide concrete t...