CVE-2026-33823

Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network...

CVE-2026-33823 Microsoft Team Events Portal Information Disclosure Vulnerability

...

CVE-2026-33823 Microsoft Team Events Portal Information Disclosure Vulnerability

...

CVE-2026-33823

Technical details (affected product/component, root cause, exploit specifics, and remediation) are not publicly available in the provided documents. Monitor for updates from the listed sources (NVD, CVE List, MSRC, Attackerkb).

CVE-2026-33111 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

...

CVE-2026-33111

CVE-2026-33111 affects Copilot Chat in Microsoft Edge. The issue is an improper neutralization of special elements used in a command (command injection) that could allow an unauthorized attacker to disclose information over a network. According to the documented metrics, this is a Network attack ...

CVE-2026-33111 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

...

CVE-2026-33111

Improper neutralization of special elements used in a command 'command injection' in Copilot Chat Microsoft Edge allows an unauthorized attacker to disclose information over a network...

CVE-2026-26129 M365 Copilot Information Disclosure Vulnerability

...

CVE-2026-26129

CVE-2026-26129 affects M365 Copilot. Root cause: improper neutralization of special elements enabling unauthorized information disclosure over a network. CVSS v3.1 base score 7.5 (NETWORK, HIGH confidentiality impact). No explicit exploit status or remediation details provided in the supplied doc...

CVE-2026-26129 M365 Copilot Information Disclosure Vulnerability

...

CVE-2026-26164

Improper neutralization of special elements in output used by a downstream component 'injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...

CVE-2026-26164 M365 Copilot Information Disclosure Vulnerability

...

CVE-2026-26164 M365 Copilot Information Disclosure Vulnerability

...

CVE-2026-26164

Technical details about CVE-2026-26164 are not publicly available in the provided documents. Monitor for updates for affected products, impact specifics, and remediation guidance.

GHSA-GR3R-CRP5-QRRM Compromised tag of intercom-php published via GitHub

Impact On April 30, 2026, a malicious commit was pushed to the intercom/intercom-php repository and tagged as version 5.0.2, using a compromised service account github-management-service. This occurred as part of the same supply chain attack that affected intercom-client on npm. The malicious...

Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2023-21716 Analysis-ICT287: Microsoft Word Remote Code Exe...

World Passkey Day: Advancing passwordless authentication

World Passkey Day is a chance to reflect on progress toward a shared goal: reducing our reliance on passwords and other phishable authentication methods by accelerating passkey adoption. As cyberattacks become more automated and AI-powered, each account is only as secure as its weakest credential...

World Passkey Day: Advancing passwordless authentication

World Passkey Day is a chance to reflect on progress toward a shared goal: reducing our reliance on passwords and other phishable authentication methods by accelerating passkey adoption. As cyberattacks become more automated and AI-powered, each account is only as secure as its weakest credential...

Chromium: CVE-2026-7977 Inappropriate implementation in Canvas

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...