146595 matches found
Microsoft .NET 安全漏洞
Microsoft .NET is a software framework developed by Microsoft Corporation in the United States, dedicated to agile software development, rapid application development, platform independence, and network transparency. Versions of Microsoft .NET prior to 8.0 8.0.22 and .9.0 9.0.11 contained securit...
Microsoft Bing 代码问题漏洞
Microsoft Bing is a web search engine developed by Microsoft Corporation in the United States. There are code vulnerabilities in Microsoft Bing, which stem from server-side request forgery attacks. These vulnerabilities may allow unauthorized attackers to perform tampering through the network...
KLA90959 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A tampering vulnerability in Microsoft Bing can be exploite...
Microsoft Purview 代码问题漏洞
Microsoft Purview is a data security and management software developed by the American company Microsoft. There is a code vulnerability in Microsoft Purview, which stems from server-side request forgery. This vulnerability could allow unauthorized attackers to gain elevated privileges through the...
KLA90961 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in M365 Copilot can...
PT-2026-26354
CVE-2026-26136 Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over … https://t.co/9F5JgCaklT...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2026-17493)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android, which can be exploited by attackers to perform spoofing attacks...
PT-2026-26353
CVE-2026-26120 Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network. https://t.co/JmIQW3ymbg...
PT-2026-26355
Microsoft 365 Copilot BizChat Elevation of Privilege Vulnerability CVE: CVE-2026-26137 PT-Identifier: PT-2026-26355 Vendor: Microsoft Product: Microsoft 365 Copilot's Business Chat CVSS: 8.9 Credits: n/a Description: Server-side request forgery ssrf in Microsoft 365 Copilot's Business Chat allows...
KLA90945 PE vulnerability in Microsoft Server Software
An elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-26137 Exploitation CVE list CVE-2026-26137 critical KB list Solution Install necessary updates from the KB section, that...
CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization
CISA is aware of malicious cyber activity targeting endpoint management systems of U.S. organizations based on the March 11, 2026 cyberattack against U.S.-based medical technology firm Stryker Corporation, which affected their Microsoft environment.1 To defend against similar malicious cyber...
audit: add missing syscalls to read class
...
Microsoft Dynamics 365 Customer Engagement 安全漏洞
Microsoft Dynamics 365 Customer Engagement is an enterprise-level application system developed by Microsoft for customer relationship management and business process automation. Version 1612.2.3034 of Microsoft Dynamics 365 Customer Engagement contains a security vulnerability. This vulnerability...
VulnCheck KEV: CVE-2026-20963
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker to execute code over a network...
Request smuggling via first-wins Content-Length parsing in inets httpd
...
libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow.
...
libexpat before 2.7.5 allows an infinite loop while parsing DTD content.
...