146592 matches found
CVE-2026-24299
CVE-2026-24299 affects M365 Copilot. The vulnerability is an improper neutralization of special elements used in a command (command injection) that could allow an unauthenticated attacker to disclose information over a network. According to the connected MSRC entry, the exploit would be delivered...
CVE-2026-24299 M365 Copilot Information Disclosure Vulnerability
...
CVE-2026-23658 Azure DevOps: msazure Elevation of Privilege Vulnerability
...
CVE-2026-26120
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-26120 Microsoft Bing Tampering Vulnerability
...
CVE-2026-26120 Microsoft Bing Tampering Vulnerability
...
CVE-2026-26120
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...
CVE-2026-32191 Microsoft Bing Images Remote Code Execution Vulnerability
...
CVE-2026-32191
Consolidated details for CVE-2026-32191 from connected records indicate Microsoft Bing Images suffers a remote code execution vulnerability due to improper neutralization of special elements used in an OS command (OS command injection). The issue allows an attacker who can reach Bing Images over ...
CVE-2026-26138
CVE-2026-26138 describes a server-side request forgery (SSRF) in Microsoft Purview that enables an attacker to achieve a network-based privilege elevation. The connected sources confirm the vulnerable product (Microsoft Purview) and the impact (privilege escalation) via SSRF, but do not provide g...
CVE-2026-26138 Microsoft Purview Elevation of Privilege Vulnerability
...
CVE-2026-26139 Microsoft Purview Elevation of Privilege Vulnerability
...
CVE-2026-26138 Microsoft Purview Elevation of Privilege Vulnerability
...
CVE-2026-26138
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26139 Microsoft Purview Elevation of Privilege Vulnerability
...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command 'os command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...
Microsoft Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
Microsoft Bing Images Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...