145735 matches found
CVE-2026-50512
Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50511
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
vulnerabilities present in Microsoft Office
Microsoft has identified vulnerabilities in various Office products such as Sharepoint, Word, Project, and Excel. A malicious individual can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as described in the tables below. For successful exploitation, th...
CVE-2026-50511 Microsoft PC Manager Elevation of Privilege Vulnerability
...
CVE-2026-50511
CVE-2026-50511 describes an elevation-of-privilege vulnerability in Microsoft PC Manager caused by improper link resolution before file access ("link following"). An authorized attacker can achieve local privilege escalation. The issue has a CVSS v3.1 base score of 7.8 (High) with Local attack ve...
CVE-2026-50511 Microsoft PC Manager Elevation of Privilege Vulnerability
...
EUVD-2026-35772
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50512 Microsoft PC Manager Elevation of Privilege Vulnerability
...
EUVD-2026-35771
Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-50512
CVE-2026-50512 involves a missing authentication flaw in Microsoft PC Manager that enables an authorized attacker to locally elevate privileges. The CVSS v3.1 score is 7.8 ( HIGH ), with local attack vector, low complexity, and privileges required: LOW; impact to confidentiality, integrity, and a...
CVE-2026-50512 Microsoft PC Manager Elevation of Privilege Vulnerability
...
Reconstructing AI activity in investigations
AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...
Reconstructing AI activity in investigations
AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...
CVE-2026-49161
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally...
CVE-2026-47635
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-47637
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-47636
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-45643
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...