162932 matches found
KLA91322 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...
Microsoft SharePoint Code Injection Vulnerability
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network...
Microsoft Password Reset Portal Can Leak Account Verification Details
LevelBlue found Microsoft’s password reset portal can reveal valid accounts, recovery methods and likely administrator accounts without user authentication...
What’s new in Microsoft Security: September 2026
AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to see those agents, govern what they can reach, and contain them when something goes wrong. This month's updates help you discover and control local AI agents, extend Zero Trust to...
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNKCondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. It...
EUVD-2026-85727
Microsoft Outlook Remote Code Execution Vulnerability...
[SECURITY] Fedora 45 Update: evolution-ews-3.62.0-1.fc45
This package allows Evolution to interact with Microsoft Exchange servers, versions 2007 and later, through its Exchange Web Services EWS interface...
VulnCheck KEV: CVE-2026-65660
Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network...
CVE-2026-70125
Microsoft Office Outlook Remote Code Execution Vulnerability...
CVE-2026-70125
A Remote Code Execution (RCE) vulnerability exists in Microsoft Office Outlook . An attacker could exploit this flaw to execute arbitrary code or commands on the vulnerable machine or process. Affected products include Microsoft 365 Apps for Enterprise (32-bit and 64-bit systems), Microsoft Offic...
Reimagining the SOC for the agentic era in Microsoft Defender
The physics of cybersecurity are changing. So must the security operations center SOC. Cyberattackers are using agents to automate execution at unprecedented scale. What once required entire teams now requires a single operator and an agent framework. That shift has exposed a hard truth: security...
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome CVE-2026-85046,...
The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.
The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors during variable initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the WebMCP component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.
The vulnerability of the WebMCP component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the HTML-in-Canvas component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain unauthorized access to protected information.
The vulnerability of the HTML-in-Canvas component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Base component in Google Chrome and Microsoft Edge web browsers allows a hacker to execute arbitrary code.
The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2026-70125: Heap-based Buffer Overflow
Microsoft Office Outlook Remote Code Execution Vulnerability...
The vulnerability of the Certificate component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to trigger a service failure.
The vulnerability of the Certificate component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-97610
Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description A remote code execution issue exists in Microsoft Outlook. This flaw allows an attacker to execute arbitrary code on the target system. Recommendations Apply the September updates t...