Microsoft Bing Tampering Vulnerability

Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...

Microsoft Purview Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

Microsoft Bing Images Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Microsoft Bing Images allows an unauthorized attacker to execute code over a network...

Microsoft Exchange Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Exchange allows an authorized attacker to elevate privileges over a network...

Incomplete control character validation in http.cookies

...

Stack overflow parsing XML with deeply nested DTD content models

...

pyOpenSSL DTLS cookie callback buffer overflow

...

Microsoft M365 Copilot 命令注入漏洞

Microsoft M365 Copilot is an AI-driven productivity tool developed by the American company Microsoft. Microsoft M365 Copilot has a command injection vulnerability, which stems from improper neutralization of special elements in commands. This vulnerability could allow unauthorized attackers to le...

Microsoft 365 Copilot Business Chat 代码问题漏洞

Microsoft 365 Copilot Business Chat is an AI chat software developed by Microsoft Corporation in the United States. There are code-related vulnerabilities in Microsoft 365 Copilot Business Chat. These vulnerabilities stem from server-side request forgery, which may allow authorized attackers to...

Microsoft Bing Images 命令注入漏洞

Microsoft Bing Images is an online image search service provided by Microsoft Corporation in the United States. Microsoft Bing Images has a command injection vulnerability. This vulnerability stems from command injection issues, which may allow unauthorized attackers to execute code through the...

KLA90949 PE vulnerabilities in Microsoft Office

An elevation of privilege vulnerabilities were found in Microsoft Purview. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2026-26138 CVE-2026-26139 Exploitation CVE list CVE-2026-26138 critical CVE-2026-26139 critical KB list Solution Install necessa...

KLA90947 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-32194 CVE-2026-32191 Exploitation Public exploits exist for this vulnerability. Related products...

Microsoft Copilot 命令注入漏洞

Microsoft Copilot is an artificial intelligence-based assistant tool developed by Microsoft. It offers capabilities such as content generation, code writing, and office collaboration. Microsoft Copilot has a command injection vulnerability, which stems from improper neutralization of special...

PT-2026-26357

Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description The software contains a server-side request forgery ssrf issue. This allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

PT-2026-26356

Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description Server-side request forgery ssrf exists in Microsoft Purview, potentially allowing an unauthorized attacker to elevate privileges over a network. SSRF occurs when a server processes...

Microsoft Bing 操作系统命令注入漏洞

Microsoft Bing is a web search engine developed by Microsoft Corporation in the United States. Microsoft Bing has a vulnerability related to operating system command injection. This vulnerability stems from issues with command injection in the operating system, which may allow unauthorized...

Microsoft Purview 代码问题漏洞

Microsoft Purview is a data security and management software developed by the American company Microsoft. There is a code vulnerability in Microsoft Purview, which stems from server-side request forgery. This vulnerability could allow unauthorized attackers to gain elevated privileges through the...

KLA90948 OSI vulnerability in Microsoft Copilot Studio

An information disclosure vulnerability was found in Microsoft Copilot Studio. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-26136 Exploitation Related products Microsoft-Copilot-Studio CVE list...

PT-2026-26372

Name of the Vulnerable Software and Affected Versions Microsoft Bing Images affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network. The...

Microsoft .NET 安全漏洞

Microsoft .NET is a software framework developed by Microsoft Corporation in the United States, dedicated to agile software development, rapid application development, platform independence, and network transparency. Versions of Microsoft .NET prior to 8.0 8.0.22 and .9.0 9.0.11 contained securit...