144101 matches found
CVE-2026-66314
creationtimestamp| type| source ---|---|--- 2026-08-03 11:15:40+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...
Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...
PT-2026-67554
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium) < 151.0.4129.59 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.59. It is, therefore, affected by multiple vulnerabilities as referenced in the July 31, 2026 advisory. - Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...
Description of the security update for Excel 2016: July 14, 2026 (KB5002886)
None None...
Microsoft Edge (Chromium-based) Tampering Vulnerability
Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
Microsoft Edge (Chromium-based) Tampering Vulnerability
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Buffer over-read in Microsoft Edge Chromium-based allows an authorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge for Android Information Disclosure Vulnerability
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...
CVE-2026-18215
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...
EUVD-2026-51480
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...
CVE-2026-18215
CVE-2026-18215 affects Keycloak (Keycloak-services) where the tenant-restriction for Microsoft accounts is bypassed via the token-exchange feature. A valid Microsoft token from a different organization can be used to access the Keycloak realm, potentially exposing sensitive data or enabling unaut...
CVE-2026-18215 Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...