146691 matches found
UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts. "As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT help des...
Harvester APT Expands Spying Operations with New GoGra Linux Malware
New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control...
MAL-2026-3018 Malicious code in microsoft-employee-experience (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c34bc4b2b8497b2f155f93295b0fe4b78eb94e7830684929547465d0b66b7a7 The package microsoft-employee-experience was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2026-24249
Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege...
Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network...
Microsoft Bing Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network...
Microsoft 365 Copilot Elevation of Privilege Vulnerability
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
Microsoft Partner Center Elevation of Privilege Vulnerability
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
udp: Fix wildcard bind conflict check when using hash2
...
ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()
...
ext4: fix use-after-free in update_super_work when racing with umount
...
CVE-2026-40706
...
CVE-2026-22015
...
CVE-2026-35236
...
CVE-2026-35240
...
CVE-2026-22005
...
CVE-2026-22004
...