165482 matches found
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...
PT-2026-95712
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A use after free issue exists that allows an unauthorized attacker to elevate privileges locally and affect the system. Use after free is a memory corruption flaw that...
CVE-2026-69843: Authentication Bypass by Spoofing
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-88097: Use After Free
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges locally...
KLA91290 PE vulnerability in Microsoft Browser
Privilege escalation vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-88097 Exploitation Related products Microsoft-Edge CVE list CVE-2026-88097 unknown Solution Install necessary updates from the Setting...
Microsoft Edge (Chromium) < 153.0.4234.46 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.46. It is, therefore, affected by multiple vulnerabilities as referenced in the September 17, 2026 advisory. - Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypas...
MSAL Authentication Bypass
The vulnerability of the Microsoft Authentication Library MSAL relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...
Microsoft Edge (Chromium) < 153.0.4234.48 (CVE-2026-88097)
The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.48. It is, therefore, affected by a vulnerability as referenced in the September 18, 2026 advisory. - Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges...
CVE-2026-78501
Improper neutralization of special elements used in a command 'command injection' in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to disclose information over a network...
CVE-2026-77903
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69865
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-55946
Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-69843
Microsoft Fabric is affected by an authentication bypass by spoofing vulnerability that allows an unauthorized, unauthenticated attacker to elevate privileges over a network. The flaw carries a CVSS 3.1 score of 10.0 (Critical) with a changed scope and high impact to confidentiality, integrity, a...
CVE-2026-78501
CVE-2026-78501 is a command injection vulnerability in Microsoft 365 Copilot's Business Chat , caused by improper neutralization of special elements used in a command. An unauthorized attacker can exploit it over a network to disclose information . The CVSS v3.1 score is 7.4 (HIGH) , with a vecto...
CVE-2026-77903
Microsoft Dataverse is affected by an authentication bypass by spoofing vulnerability that allows an unauthorized, remote attacker to elevate privileges over a network. The CVSS 3.1 score is 9.0 (CRITICAL) , with a vector of AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating high attack complexity b...
CVE-2026-69865
Microsoft Container Registry is affected by an authorization bypass through user-controlled key , allowing an unauthorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 10.0 (Critical) with a changed scope and high impact to both confidentiality and integrity, while ...
CVE-2026-55946
CVE-2026-55946 is a command injection vulnerability in Microsoft Copilot resulting from improper neutralization of special elements used in a command. An unauthorized remote attacker can leverage this to disclose information over a network . The CVSS 3.1 score is 6.1 (MEDIUM) with the vector AV:N...
Improving email security outcomes with real-world Microsoft Defender insights
Every benchmark tells a story. The most valuable ones tell us where to improve next. For five consecutive quarters Microsoft has published email security benchmarking reports to provide greater transparency into real-world protection outcomes. The results have shown strong Microsoft Defender...
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an authorized attacker to elevate privileges over a network...