PT-2026-65016

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...

PT-2026-65008

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

PT-2026-65032

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network...

EUVD-2026-48454

Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...

EUVD-2026-48453

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

EUVD-2026-48451

Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...

CVE-2026-54120

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

CVE-2026-50517

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...

CVE-2026-35425

Improper access control in Azure API Management APIM allows an authorized attacker to execute code over a network...

EUVD-2026-48457

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...

PT-2026-64203

Name of the Vulnerable Software and Affected Versions Microsoft M365 Copilot affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute code over a network. Deserialization is the process of converting a data stream back into an object,...

CVE-2026-54120

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

Azure AI Search Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...

Microsoft M365 Copilot Remote Code Execution Vulnerability

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...

Azure API Management (APIM) Remote Code Execution Vulnerability

Improper access control in Azure API Management APIM allows an authorized attacker to execute code over a network...

PT-2026-64205

Name of the Vulnerable Software and Affected Versions Azure Red Hat OpenShift ARO affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version tha...

PT-2026-64207

Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...

CVE-2026-3821

Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...

EUVD-2026-44407

Microsoft Security Advisory CVE-2026-50659 – .NET Spoofing Vulnerability...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...