146762 matches found
CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
...
CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
...
CVE-2026-0391
CVE-2026-0391 describes a user-interface misrepresentation in Microsoft Edge (Chromium-based) for Android that could allow an attacker to spoof information over a network. The vulnerability affects Microsoft Edge for Android, with the issue framed as a UI spoofing flaw rather than a network-explo...
AZL-76665 CVE-2025-68121 affecting package msft-golang for versions less than 1.24.12-1
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the...
Azure Arc Elevation of Privilege Vulnerability
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Azure Front Door Elevation of Privilege Vulnerability
...
Azure Function Information Disclosure Vulnerability
...
Exploit for External Control of File Name or Path in Microsoft
C...
Microsoft Edge for Android 安全漏洞
Microsoft Edge for Android is a browser in the Android operating system developed by the American company Microsoft. There is a security vulnerability in Microsoft Edge for Android, which stems from improper presentation of key user interface information. This vulnerability may allow unauthorized...
Microsoft Azure Arc 访问控制错误漏洞
Microsoft Azure Arc is a storage system from Microsoft USA. that extends the Azure platform into your environment. Microsoft Azure Arc has an Access Control Error vulnerability that can be exploited by an attacker to elevate privileges...
Microsoft Azure Front Door 访问控制错误漏洞
Microsoft Azure Front Door is a cloud-based content delivery network from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Front Door, which can be exploited by an attacker to elevate privileges...
CVE-2026-0948
The CVE-2026-0948 vulnerability affects the Drupal Microsoft Entra ID SSO Login module for Drupal, where insufficient validation of responses from the Microsoft Entra ID service allows an authentication bypass. This can lead to complete account takeover of any user, including site administrators,...
CVE-2026-0948 Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4...
EUVD-2026-5338
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Microsoft Entra ID SSO Login allows Privilege Escalation.This issue affects Microsoft Entra ID SSO Login: from 0.0.0 before 1.0.4...
Op Neusploit: Russian APT28 Uses Microsoft Office Flaw in Malware Attacks
A new campaign by the Russian-linked group APT28, called Op Neusploit, exploits a Microsoft Office flaw to steal emails for remote control of devices in Ukraine, Slovakia, and Romania...
Microsoft SDL: Evolving security practices for an AI-powered world
As AI reshapes the world, organizations encounter unprecedented risks, and security leaders take on new responsibilities. Microsoft’s Secure Development Lifecycle SDL is expanding to address AI-specific security concerns in addition to the traditional software security areas that it has...
Microsoft is Giving the FBI BitLocker Keys
Microsoft gives the FBI the ability to decrypt BitLocker in response to court orders: about twenty times per year. It's possible for users to store those keys on a device they own, but Microsoft also recommends BitLocker users store their keys on its servers for convenience. While that means...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
🏛️CTT -Microsoft Office OLE Manifold BYPASS CVE-2026-21509 Stan...
CLEANSTART-2026-DY37532 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Security vulnerability affects the cortex-fips package. Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
Microsoft Office Code Execution Vulnerability (CNVD-2026-16161)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...