146732 matches found
Security Updates for Microsoft Access Products (October 2025)
The Microsoft Access Products are missing a security update. It is, therefore, affected by multiple information disclosure vulnerabilities. An unauthenticated, local attacker can exploit these, via an out-of-bounds read, to disclose potentially sensitive information. Note that Nessus has not test...
PT-2025-42104
Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager affected versions not specified Description An issue exists in Microsoft Configuration Manager where improper neutralization of special elements in SQL commands allows an attacker to inject malicious SQL code...
PT-2025-42107
Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use-after-free condition exists in Microsoft Office Word that could allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...
GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds
...
GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds
...
GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow
...
bluetooth/l2cap: sync sock recv cb and release
...
CVE-2025-59252
M365 Copilot Spoofing Vulnerability...
Lua library commands may lead to integer overflow and potential RCE
...
Chromium: CVE-2025-11458 Heap buffer overflow in Sync
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
EUVD-2025-33549
M365 Copilot Spoofing Vulnerability...
CVE-2025-59252
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2025-59252
CVE-2025-59252 — M365 Copilot Information Disclosure Affected product: Microsoft 365 Copilot (Copilot/spoofing context referenced across sources). Root cause: Improper neutralization of special elements used in a command (command injection) in Copilot, enabling an unauthorized attacker to disclos...
CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability
...
CVE-2025-59252 M365 Copilot Information Disclosure Vulnerability
...
Exploit for Improper Input Validation in Microsoft
MSMQ Vulnerability Proof of Concept This repository contains...
Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog
Security is a core focus at Microsoft Ignite 2025, reflected in dedicated sessions and hands-on experiences designed for security professionals and leaders. Whether you’re shaping strategy or working on the front lines, Microsoft Ignite offers direct access to the latest advancements and practica...
M365 Copilot Information Disclosure Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to disclose information over a network...