146261 matches found
CVE-2026-26138 Microsoft Purview Elevation of Privilege Vulnerability
...
CVE-2026-26138
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26139 Microsoft Purview Elevation of Privilege Vulnerability
...
Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
Microsoft Purview Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
Microsoft Exchange Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
Microsoft Bing Tampering Vulnerability
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...
Incomplete control character validation in http.cookies
...
Stack overflow parsing XML with deeply nested DTD content models
...
pyOpenSSL DTLS cookie callback buffer overflow
...
Microsoft M365 Copilot 命令注入漏洞
Microsoft M365 Copilot is an AI-driven productivity tool developed by the American company Microsoft. Microsoft M365 Copilot has a command injection vulnerability, which stems from improper neutralization of special elements in commands. This vulnerability could allow unauthorized attackers to le...
Microsoft 365 Copilot Business Chat 代码问题漏洞
Microsoft 365 Copilot Business Chat is an AI chat software developed by Microsoft Corporation in the United States. There are code-related vulnerabilities in Microsoft 365 Copilot Business Chat. These vulnerabilities stem from server-side request forgery, which may allow authorized attackers to...
Microsoft Bing Images 命令注入漏洞
Microsoft Bing Images is an online image search service provided by Microsoft Corporation in the United States. Microsoft Bing Images has a command injection vulnerability. This vulnerability stems from command injection issues, which may allow unauthorized attackers to execute code through the...
Microsoft Copilot 命令注入漏洞
Microsoft Copilot is an artificial intelligence-based assistant tool developed by Microsoft. It offers capabilities such as content generation, code writing, and office collaboration. Microsoft Copilot has a command injection vulnerability, which stems from improper neutralization of special...
PT-2026-26357
Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description The software contains a server-side request forgery ssrf issue. This allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
PT-2026-26356
Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description Server-side request forgery ssrf exists in Microsoft Purview, potentially allowing an unauthorized attacker to elevate privileges over a network. SSRF occurs when a server processes...
Microsoft Bing 操作系统命令注入漏洞
Microsoft Bing is a web search engine developed by Microsoft Corporation in the United States. Microsoft Bing has a vulnerability related to operating system command injection. This vulnerability stems from issues with command injection in the operating system, which may allow unauthorized...