83 matches found
no-gdid
no-gdid Windows のグローバル デバイス識別子 GDID を読み取り、理解し、沈黙させます — VPN を使用していた容疑者を FBI が特定するのに役立った、アカウントごとに隠されたデバイス ID。 ⚠️ 最初に正直な免責事項: このツールは GDID を消去せず 、匿名にもしません 。GDID は、サインインした瞬間から Microsoft アカウントに結び付けられ、Microsoft のサーバー上に存在します。no-gdid はお使いのマシンがそれを 再登録・報告 するのを止めるだけです — Microsoft...
CVE-2026-68850
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
CVE-2026-68852
Microsoft Account is affected by a use of uninitialized resource vulnerability that allows an authorized attacker with low privileges to locally disclose information (CVSS 3.1: 5.5, MEDIUM). The vulnerability requires local access and no user interaction, with a high impact on confidentiality but...
EUVD-2026-73411
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
EUVD-2026-73410
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
CVE-2026-68850
This vulnerability is a heap-based buffer overflow in Microsoft Account that allows an attacker with existing low-level access to locally elevate privileges . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with low complexity and low privileges required, resulting in high imp...
Microsoft Account Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...
BIT-KEYCLOAK-2026-18215 Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...
EUVD-2026-48452
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-56165
CVE-2026-56165: Heap-based buffer overflow in Microsoft Account enables remote code execution over a network. Affected: Microsoft Account service. Root cause: heap-based overflow (details not provided). Impact: high (confidentiality, integrity, availability). CVSS v3.1 base score 9.8 (CRITICAL); ...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability
...
CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability
...
Microsoft Account Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
PT-2026-64206
Name of the Vulnerable Software and Affected Versions Microsoft Account affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Account, which could allow an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow is a memo...
KLA91175 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...
CVE-2026-48991
XianYuLauncher (Minecraft Java Edition launcher) is affected in versions prior to 1.5.5. The legacy Microsoft account OAuth sign-in flow used a fixed localhost redirect URI and lacked PKCE and state validation, allowing sensitive authentication artifacts to be exposed under certain local attack c...
