M365 Copilot Information Disclosure Vulnerability

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network...

VoidLink Malware Puts Cloud Systems on High Alert With Custom Built Attacks

Sysdig TRT analysis reveals VoidLink as a revolutionary Linux threat. Using Serverside Rootkit Compilation and Zig code, it targets AWS and Azure with adaptive stealth...

Microsoft Copilot Studio command injection vulnerability

Microsoft Copilot Studio is an artificial intelligence chatbot developed by Microsoft Corporation. Microsoft Copilot Studio has a command injection vulnerability, which stems from improper neutralization of certain elements. Attackers can exploit this vulnerability to access sensitive information...

Microsoft Account cross-site scripting vulnerability

The Microsoft Account is an account service provided by the American company Microsoft. The Microsoft Account has a cross-site scripting vulnerability, which stems from improper input during the web page generation process...

Microsoft M365 Copilot security vulnerabilities

Microsoft M365 Copilot is an AI-driven productivity tool developed by Microsoft Corporation. There is a security vulnerability in Microsoft M365 Copilot, which stems from improper validation of certain types of inputs. Attackers can exploit this vulnerability to leak information over the network...

Microsoft Entra authorization issue vulnerability

Microsoft Entra is an identity and access management system developed by the American company Microsoft. There is a vulnerability in Microsoft Entra’s authorization mechanism, which stems from improper authorization practices. Attackers can exploit this vulnerability to gain increased privileges...

Microsoft 365 Word Copilot security vulnerabilities

Microsoft 365 Word Copilot is an AI assistant developed by the American company Microsoft. There is a security vulnerability in Microsoft 365 Word Copilot, which stems from improper handling of escaped sequences, meta-sequences, or control sequences. Attackers can exploit this vulnerability to le...

PT-2026-4306

Name of the Vulnerable Software and Affected Versions Microsoft Account affected versions not specified Description The issue involves improper neutralization of input during web page generation, specifically a 'cross-site scripting' condition within Microsoft Account. This allows an unauthorized...

Exploit for Use After Free in Microsoft

RED-TEAM-TOOL-KIT RED TEAMING TOOLKIT COMPLETO 2025-2026...

Exploit for CVE-2022-30190

Malware-Analysis-Follina-CVE-2022-30190 Static Malware Anal...

slab allows out-of-bounds access in `get_disjoint_mut` due to incorrect bounds check

...

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

...

Microsoft VFS for Git code issue vulnerability

Microsoft VFS for Git is a Git optimization system developed by Microsoft Corporation in the United States. Version 1.0.21014.1 of Microsoft VFS for Git contains a code vulnerability. This vulnerability stems from the Windows service GVFS.Service having a service path that lacks quotes, which may...

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise, related to memory usage after it is released, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Code Execution Vulnerability (CNVD-2026-08746)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code...

Microsoft Excel Access Control Error Vulnerability

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to bypass certain features...

Microsoft Windows SMB Server Elevation of Privilege Vulnerability (CNVD-2026-10679)

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An elevation of privilege vulnerability exists in Microsoft Windows SMB Server due to...

Microsoft Windows Tablet Windows User Interface (TWINUI) Subsystem Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Tablet Windows User Interface TWINUI Subsystem, which can be exploited by attackers to obtain sensitive...

Microsoft Graphics Kernel Competitive Conditions Issue Vulnerability

Microsoft Graphics Kernel is a kernel-mode graphics driver subsystem from Microsoft. A security vulnerability exists in Microsoft Graphics Kernel. An attacker could exploit the vulnerability to gain elevated privileges...

Microsoft Excel Code Execution Vulnerability (CNVD-2026-08747)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code...