CVE-2025-49736

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49755

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25007

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25007

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-49736

The CVE-2025-49736 entry concerns Microsoft Edge (Chromium-based) for Android where the UI can perform an incorrect action, enabling spoofing of the user interface over a network. The available data confirms the affected product family (Edge for Android) and the general impact (spoofing via UI ma...

CVE-2025-49755

Microsoft Edge for Android is affected by CVE-2025-49755, a UI misrepresentation spoofing vulnerability in which an attacker could exploit network access to deceive users. The associated data identifies the affected product as Edge (Chromium-based) on Android and cites a CVSSv3.1 base score of 4....

CVE-2025-50171

CVE-2025-50171 affects Windows Remote Desktop Server/Remote Desktop Services. Description confirms missing authorization enables an unauthenticated network attacker to spoof/impersonate a user over the network. The connected sources (Microsoft Windows Updates notes and vulnerability tables) indic...

CVE-2025-50154

CVE-2025-50154 is a Windows File Explorer spoofing vulnerability where Explorer may disclose NTLMv2-SSP hashes by rendering a remote icon for a .LNK or Library-MS that's hosted on SMB, triggering authentication. Multiple connected documents describe attacker-controlled .LNK/.library-ms payloads a...

CVE-2025-25007

CVE-2025-25007 affects Microsoft Exchange Server. The issue arises from improper validation of input syntax, allowing an unauthenticated network attacker to spoof communications. The vulnerability is reported with CVSS v3.1 base score 5.3 (Medium) and is network-exploitable with no user interacti...

CVE-2025-25006

CVE-2025-25006 affects Microsoft Exchange Server. The connected MSKB/ advisories confirm a spoofing vulnerability arising from improper handling of an additional special element, exploitable over the network with no privileges or user interaction required. Microsoft released fixes: KB5063224 (Exc...

CVE-2025-49745

CVE-2025-49745 affects Microsoft Dynamics 365 (on-premises) (version 9.1). It is a cross-site scripting vulnerability caused by improper neutralization of input during web page generation, enabling an attacker to spoof the user interface over a network. The vulnerability requires user interaction...

Microsoft Exchange Server Spoofing Vulnerability

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

Remote Desktop Spoofing Vulnerability

Missing authorization in Remote Desktop Server allows an unauthorized attacker to perform spoofing over a network...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network...

Microsoft Windows File Explorer Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

PT-2025-32741

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The software contains an issue with improper handling of additional special elements, potentially allowing an unauthorized attacker to perform spoofing over a network...

PT-2025-32770 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: A user interface UI misrepresentation of critical information in Microsoft Edge for Android can allow an unauthorized attacker to perform spoofing over a network...