152827 matches found
CVE-2026-47647: Improper Access Control
Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network...
KLA91116 SUI vulnerability in Microsoft Dynamics
A spoofing vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-47646 Exploitation CVE list CVE-2026-47646 high KB list Solution Install necessary updates from the KB section, that are listed in your...
KLA91115 PE vulnerability in Microsoft Server Software
An elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-48582 Exploitation Related products Microsoft-Exchange-Online CVE list CVE-2026-48582 critical Solution Install necessary...
PT-2026-54525
Уязвимость браузера Microsoft Edge связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, осуществить подмену данных...
KLA91114 SUI vulnerability in Microsoft Browser
A spoofing vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-32208 Exploitation Related products Microsoft-Edge CVE list CVE-2026-32208 high Solution Install necessary updates from the Settings and mo...
PT-2026-50802
Name of the Vulnerable Software and Affected Versions M365 Copilot affected versions not specified Description A missing authentication flaw in a critical function allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about ...
CVE-2026-48991 XianYuLauncher: Legacy Microsoft account OAuth sign-in flow lacks PKCE and state validation
XianYuLauncher is a Minecraft Java Edition launcher. In versions prior to 1.5.5, sensitive authentication artifacts could be exposed during a user-initiated login under certain local attack conditions. Affected versions relied on a fixed localhost redirect URI without PKCE or state validation...
CVE-2026-48991
XianYuLauncher (Minecraft Java Edition launcher) is affected in versions prior to 1.5.5. The legacy Microsoft account OAuth sign-in flow used a fixed localhost redirect URI and lacked PKCE and state validation, allowing sensitive authentication artifacts to be exposed under certain local attack c...
June "In the Trend of VM" (#28): Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities
June "In the Trend of VM" 28: Linux kernel, Microsoft Defender, and Palo Alto Networks device vulnerabilities. Presenting the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. In the previous May edition, we covered four vulnerabilities. This time, there...
Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist
...
httpc leaks Authorization header to cross-origin redirect targets
...
Stack Buffer Overflow in ei_s_print_term at Very Large Integer
...
Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft
cve-id ⚡ Simple Usage Use this project only in safe and...
The vulnerability of the Microsoft Exchange Server mail server, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office products and Microsoft 365 Apps for Enterprise allows a perpetrator to disclose protected information.
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protecte...
The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of requests on the server side, allows attackers to increase their privileges.
The vulnerability of Microsoft Exchange Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Microsoft Teams’ corporate platform for Android, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of Microsoft Teams’ corporate platform for Android is related to the lack of measures taken at the management level to secure data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Security Updates for Microsoft Office Products (June 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the june-16-2026 advisory. - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-44819, CVE-2026-44824,...