146594 matches found
CVE-2026-45659
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-45659
CVE-2026-45659 is a deserialization vulnerability in Microsoft SharePoint Server that enables an authorized attacker to execute code over a network. The root cause is unsafe deserialization via LosFormatter.Deserialize during processing of list items in Microsoft.SharePoint.Library, triggered by ...
CVE-2026-45659 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2026-33843 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
...
CVE-2026-41090
CVE-2026-41090 affects Microsoft Copilot. The vulnerability arises from improper neutralization of elements used in a command (command injection) that enables tampering over a network. The CVSS‑3.1 vector indicates network attack, high confidentiality and integrity impact, no availability impact,...
CVE-2026-41090 Microsoft Copilot Tampering Vulnerability
...
CVE-2026-41090
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-31512
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to perform tampering over a network...
CVE-2026-41090 Microsoft Copilot Tampering Vulnerability
...
EUVD-2026-31513
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-42827
CVE-2026-42827 concerns a command injection vulnerability in Microsoft 365 Copilot. The Red Hat, NVD, MSRC, and other feeds describe improper neutralization of special elements used in a command, enabling an attacker to disclose information over a network. Affected product is Microsoft 365 Copilo...
CVE-2026-42827 M365 Copilot Information Disclosure Vulnerability
...
CVE-2026-42827 M365 Copilot Information Disclosure Vulnerability
...
CVE-2026-23652 Microsoft Power Pages Remote Code Execution Vulnerability
...
CVE-2026-23652 Microsoft Power Pages Remote Code Execution Vulnerability
...
CVE-2026-23652
Microsoft Power Pages is affected by CVE-2026-23652, a remote code execution vulnerability due to improper neutralization of special elements used in a command injection. The issue allows an unauthenticated attacker to trigger code execution over the network with no user interaction, by exploitin...
FBI Warns of Kali365 Phishing Service Targeting Microsoft 365 Account
FBI warns of Kali365, a PaaS scam kit that lets cybercriminals bypass MFA and hijack Microsoft 365 accounts without passwords...
Microsoft recognized as a Leader in The Forrester Wave™ for Workforce Identity Security Platforms
Identity is the backbone of modern cybersecurity. Every access decision carries risk, across employees, partners, devices, workloads, and an expanding set of AI-powered agents. But most organizations are still operating across disparate systems. Identity signals are captured in one place, access...
CVE-2025-58074
A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges...
