KLA90815 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof us...

Microsoft Word 资源管理错误漏洞

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...

PT-2025-50176

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A relative path traversal issue exists in Microsoft Office Access. This allows an unauthorized attacker to execute code locally. The issue can also allow remote attackers to...

PT-2025-50198

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper input validation in Microsoft Exchange Server can allow an authorized attacker to elevate privileges on a network. This issue allows attackers to affect the system...

Microsoft Graphics Component 信息泄露漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affecte...

KLA90814 ACE vulnerability in Microsoft Azure

A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2025-62550 Related products Microsoft-Azure Azure-Monitor Azure-Monitor-Agent CVE list CVE-2025-62550...

KLA90811 Multiple vulnerabilities in Microsoft Product (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a...

PT-2025-50183

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word. This allows an unauthorized attacker to execute code locally. The issue enables remote attackers to execute arbitrary...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel due to an untrusted pointer dereference flaw. An attacker could exploit the vulnerability to execute arbitrary code on the system...

PT-2025-50185

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An issue exists in Microsoft Office Excel where an untrusted pointer dereference can occur. This can allow an unauthorized attacker to execute code locally. The issue enables...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel. An attacker could exploit this vulnerability to execute arbitrary code on the system...

PT-2025-50184

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An issue exists in Microsoft Office Excel where an untrusted pointer dereference can occur. This can allow an unauthorized attacker to execute code locally. The issue enables...

PT-2025-50181

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free condition exists in Microsoft Office. This allows an unauthorized attacker to execute code locally. The issue enables remote attackers to execute arbitrary code and...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which is caused due to a type confusion flaw. An...

PT-2025-50188

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Excel. This flaw could allow a remote attacker to execute arbitrary code on the affected system. Recommendations At the...

How Brad Schlintz built a life of freedom and impact through security research

At Microsoft Security Response Center MSRC, we celebrate the diverse paths that bring researchers to our community. Brad Schlintz’s story is one of curiosity, resilience, and a relentless drive to learn, spanning rural beginnings, career pivots, and a life shaped by both technology and travel. In...

Microsoft Azure Monitor 缓冲区错误漏洞

Microsoft Azure Monitor is a new style of observability tool from Microsoft USA that enables end-to-end monitoring capabilities for applications, infrastructure and networks. A buffer error vulnerability exists in Microsoft Azure Monitor. An attacker exploiting this vulnerability could remotely...

Microsoft GitHub Copilot for JetBrains 命令注入漏洞

Microsoft GitHub Copilot for JetBrains is an AI programming assistant plug-in from Microsoft USA that can be installed in various IDEs from JetBrains. A command injection vulnerability exists in Microsoft GitHub Copilot for JetBrains. An attacker exploiting this vulnerability could remotely execu...

Microsoft Excel 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel due to an untrusted pointer dereference flaw. An attacker could exploit the vulnerability to execute arbitrary code on the system...