2378 matches found
.NET Denial of Service Vulnerability
Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...
CVE-2025-24071
CVE-2025-24071 CNA: Microsoft Corporation Published: 2025-03-11 Updated: 2025-03-13 Title: Microsoft Windows File Explorer Spoofing Vulnerability Description Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing ove...
Microsoft Windows: CVE-2026-96300: RPC Endpoint Mapper Service Denial of Service Vulnerability
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...
EUVD-2026-82599
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-82594
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-83946
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-85917
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-80050
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-80051
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85893
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...
dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-66302
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
GHSA-Q72M-F2R4-W4CW Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...