146730 matches found
CVE-2026-26138
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26139
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26136
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26120
Server-side request forgery ssrf in Microsoft Bing allows an unauthorized attacker to perform tampering over a network...
CVE-2026-24299
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26137 Microsoft Exchange Elevation of Privilege Vulnerability
...
CVE-2026-26137
CVE-2026-26137 is described as a server-side request forgery (SSRF) that affects Microsoft Exchange (and related Microsoft 365 Copilot/Business Chat contexts in linked sources). The available documents state that an authorized attacker can elevate privileges over a network, with the CVSS 3.1 scor...
CVE-2026-26137 Microsoft Exchange Elevation of Privilege Vulnerability
...
CVE-2026-26136 Microsoft Copilot Information Disclosure Vulnerability
...
CVE-2026-26136 Microsoft Copilot Information Disclosure Vulnerability
...
CVE-2026-26136
Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-26136
CVE-2026-26136 is a command injection vulnerability in Microsoft Copilot caused by improper neutralization of special elements in commands. The issue enables an unauthenticated attacker to disclose information over the network. Affected product: Microsoft Copilot (including Copilot components ref...
CVE-2026-24299 M365 Copilot Information Disclosure Vulnerability
...
CVE-2026-24299
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-24299 M365 Copilot Information Disclosure Vulnerability
...
CVE-2026-24299
CVE-2026-24299 affects M365 Copilot. The vulnerability is an improper neutralization of special elements used in a command (command injection) that could allow an unauthenticated attacker to disclose information over a network. According to the connected MSRC entry, the exploit would be delivered...
CVE-2026-23658 Azure DevOps: msazure Elevation of Privilege Vulnerability
...
CVE-2026-26120
Technical details are not publicly available in the provided documents. Monitor for updates.