162938 matches found
CVE-2026-88097: Use After Free
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges locally...
Microsoft Edge (Chromium) < 153.0.4234.46 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.46. It is, therefore, affected by multiple vulnerabilities as referenced in the September 17, 2026 advisory. - Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypas...
KLA91290 PE vulnerability in Microsoft Browser
Privilege escalation vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-88097 Exploitation Related products Microsoft-Edge CVE list CVE-2026-88097 unknown Solution Install necessary updates from the Setting...
CVE-2026-78501
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
CVE-2026-77903
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69865
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-55946
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-69843
Microsoft Fabric is affected by an authentication bypass by spoofing vulnerability that allows an unauthorized, unauthenticated attacker to elevate privileges over a network. The flaw carries a CVSS 3.1 score of 10.0 (Critical) with a changed scope and high impact to confidentiality, integrity, a...
CVE-2026-78501
CVE-2026-78501 is a command injection vulnerability in Microsoft 365 Copilot's Business Chat , caused by improper neutralization of special elements used in a command. An unauthorized attacker can exploit it over a network to disclose information . The CVSS v3.1 score is 7.4 (HIGH) , with a vecto...
CVE-2026-77903
Microsoft Dataverse is affected by an authentication bypass by spoofing vulnerability that allows an unauthorized, remote attacker to elevate privileges over a network. The CVSS 3.1 score is 9.0 (CRITICAL) , with a vector of AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating high attack complexity b...
CVE-2026-69865
Microsoft Container Registry is affected by an authorization bypass through user-controlled key , allowing an unauthorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 10.0 (Critical) with a changed scope and high impact to both confidentiality and integrity, while ...
CVE-2026-55946
CVE-2026-55946 is a command injection vulnerability in Microsoft Copilot resulting from improper neutralization of special elements used in a command. An unauthorized remote attacker can leverage this to disclose information over a network . The CVSS 3.1 score is 6.1 (MEDIUM) with the vector AV:N...
Improving email security outcomes with real-world Microsoft Defender insights
Every benchmark tells a story. The most valuable ones tell us where to improve next. For five consecutive quarters Microsoft has published email security benchmarking reports to provide greater transparency into real-world protection outcomes. The results have shown strong Microsoft Defender...
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Microsoft Container Registry Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...
Microsoft Fabric Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...
Azure Billing Elevation of Privilege Vulnerability
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...