4009 matches found
EUVD-2026-82597
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...
EUVD-2026-82588
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
CVE-2026-85887
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network...
CVE-2026-85885
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
CVE-2026-85887
CVE-2026-85887 is an information disclosure vulnerability in M365 Copilot caused by an incorrect permission assignment on a critical resource. An attacker with low privileges (authorized access) can disclose information over a network. The CVSS 3.1 score is 7.7 (HIGH) with a changed scope and hig...
CVE-2026-85878
CVE-2026-85878 is an improper authorization vulnerability in Azure Database for PostgreSQL that allows an authorized attacker to elevate privileges over a network. Microsoft's CNA rates it CVSS 3.1 9.9 (CRITICAL) with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicating a low-complexity ne...
CVE-2026-87701
Azure Cosmos DB is affected by an injection vulnerability (improper neutralization of special elements in output used by a downstream component) that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 9.6 (CRITICAL) , with a vector of AV:N/AC:L/PR:L/UI:N/S:...
CVE-2026-85885
Microsoft 365 Copilot is affected by a command injection vulnerability, classified as improper neutralization of special elements used in a command. An authorized attacker (low privileges required) can exploit this over the network without user interaction to elevate privileges , with the attack ...
dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
Azure Database for PostgreSQL Elevation of Privilege Vulnerability
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...
Azure Cosmos DB Elevation of Privilege Vulnerability
Improper neutralization of special elements in output used by a downstream component 'injection' in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network...
CVE-2026-45659
CVE-2026-45659 Microsoft Office SharePoint 中未受信任数据的反序列化允许经授权的攻击者通过网络执行代码。 ⚡ 简单用法 仅在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 授权的渗透测试环境 示例设置： root@kitploit: git clone cd 示例用法： root@kitploit: 安装依赖 pip install -r requirements.txt 基本命令执行 python cve-2026-45659.py -t http://sp.lab.local -u...
EUVD-2026-76143
Use after free in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
CVE-2026-66308
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...
CVE-2026-66305
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
CVE-2026-66303
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
CVE-2026-66303
CVE-2026-66303 is a null pointer dereference in Skype for Business that allows an authorized attacker (low privileges required) to cause a denial of service over the network. The affected products are Skype for Business Server Subscription Edition , Skype for Business Server 2019 , and Skype for ...
CVE-2026-66305
CVE-2026-66305 is a spoofing vulnerability in Skype for Business Server (Subscription Edition, 2019, and 2015) caused by the use of client-side authentication , which allows an authorized attacker to perform spoofing over a network. The CVSS v3.1 score is 7.1 (HIGH) , with high integrity impact a...