146730 matches found
Microsoft Bing Images 命令注入漏洞
Microsoft Bing Images is an online image search service provided by Microsoft Corporation in the United States. Microsoft Bing Images has a command injection vulnerability. This vulnerability stems from command injection issues, which may allow unauthorized attackers to execute code through the...
KLA90949 PE vulnerabilities in Microsoft Office
An elevation of privilege vulnerabilities were found in Microsoft Purview. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2026-26138 CVE-2026-26139 Exploitation CVE list CVE-2026-26138 critical CVE-2026-26139 critical KB list Solution Install necessa...
KLA90947 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-32194 CVE-2026-32191 Exploitation Public exploits exist for this vulnerability. Related products...
Microsoft Copilot 命令注入漏洞
Microsoft Copilot is an artificial intelligence-based assistant tool developed by Microsoft. It offers capabilities such as content generation, code writing, and office collaboration. Microsoft Copilot has a command injection vulnerability, which stems from improper neutralization of special...
Microsoft Bing 操作系统命令注入漏洞
Microsoft Bing is a web search engine developed by Microsoft Corporation in the United States. Microsoft Bing has a vulnerability related to operating system command injection. This vulnerability stems from issues with command injection in the operating system, which may allow unauthorized...
PT-2026-26357
Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description The software contains a server-side request forgery ssrf issue. This allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
PT-2026-26356
Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description Server-side request forgery ssrf exists in Microsoft Purview, potentially allowing an unauthorized attacker to elevate privileges over a network. SSRF occurs when a server processes...
Microsoft M365 Copilot 命令注入漏洞
Microsoft M365 Copilot is an AI-driven productivity tool developed by the American company Microsoft. Microsoft M365 Copilot has a command injection vulnerability, which stems from improper neutralization of special elements in commands. This vulnerability could allow unauthorized attackers to le...
Microsoft Bing 代码问题漏洞
Microsoft Bing is a web search engine developed by Microsoft Corporation in the United States. There are code vulnerabilities in Microsoft Bing, which stem from server-side request forgery attacks. These vulnerabilities may allow unauthorized attackers to perform tampering through the network...
Microsoft Purview 代码问题漏洞
Microsoft Purview is a data security and management software developed by the American company Microsoft. There is a code vulnerability in Microsoft Purview, which stems from server-side request forgery. This vulnerability could allow unauthorized attackers to gain elevated privileges through the...
PT-2026-26372
Name of the Vulnerable Software and Affected Versions Microsoft Bing Images affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network. The...
Microsoft .NET 安全漏洞
Microsoft .NET is a software framework developed by Microsoft Corporation in the United States, dedicated to agile software development, rapid application development, platform independence, and network transparency. Versions of Microsoft .NET prior to 8.0 8.0.22 and .9.0 9.0.11 contained securit...
KLA90948 OSI vulnerability in Microsoft Copilot Studio
An information disclosure vulnerability was found in Microsoft Copilot Studio. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2026-26136 Exploitation Related products Microsoft-Copilot-Studio CVE list...
KLA90959 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A tampering vulnerability in Microsoft Bing can be exploite...
KLA90945 PE vulnerability in Microsoft Server Software
An elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-26137 Exploitation CVE list CVE-2026-26137 critical KB list Solution Install necessary updates from the KB section, that...
PT-2026-26355
Microsoft 365 Copilot BizChat Elevation of Privilege Vulnerability CVE: CVE-2026-26137 PT-Identifier: PT-2026-26355 Vendor: Microsoft Product: Microsoft 365 Copilot's Business Chat CVSS: 8.9 Credits: n/a Description: Server-side request forgery ssrf in Microsoft 365 Copilot's Business Chat allows...
KLA90961 Multiple vulnerabilities in Microsoft Apps
Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in M365 Copilot can...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability (CNVD-2026-17493)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based for Android, which can be exploited by attackers to perform spoofing attacks...
PT-2026-26354
CVE-2026-26136 Improper neutralization of special elements used in a command 'command injection' in Microsoft Copilot allows an unauthorized attacker to disclose information over … https://t.co/9F5JgCaklT...
Microsoft Purview 代码问题漏洞
Microsoft Purview is a data security and management software developed by the American company Microsoft. There is a code vulnerability in Microsoft Purview, which stems from server-side request forgery. This vulnerability could allow unauthorized attackers to gain elevated privileges through the...