146770 matches found
PT-2025-52361
Name of the Vulnerable Software and Affected Versions Microsoft Partner Center affected versions not specified Description An improper authorization issue exists in Microsoft Partner Center. This allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment,...
Microsoft Purview 代码注入漏洞
Microsoft Purview is a data security and management software from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Purview that originates from path traversal and could lead to network code execution...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to perform spoofing attacks...
OneDrive / SharePoint Backup Fails with "Error: Invalid MIME content-length header encountered on read."
Challenge A backup job for OneDrive or SharePoint items processed by Veeam Backup for Microsoft 365 fails when attempting to download certain item versions, displaying the following error: Invalid MIME content-length header encountered on read Cause The issue is related to the download process us...
Access Fabric: A modern approach to identity and network access
Today, most organizations use multiple identity systems and multiple network access solutions from multiple vendors. This happens, either intentionally or organically, when different areas of a company choose different tools, creating a fragmented environment that leaves weaknesses that...
Access Fabric: A modern approach to identity and network access
Today, most organizations use multiple identity systems and multiple network access solutions from multiple vendors. This happens, either intentionally or organically, when different areas of a company choose different tools, creating a fragmented environment that leaves weaknesses that...
Potential non-constant time compiled code with Clang LLVM
...
Un-verified kernel bypass Secure Boot mechanism in direct boot mode
...
binfmt_misc: restore write access before closing files opened by open_exec()
...
timers: Fix NULL function pointer race in timer_shutdown_sync()
...
crash: fix crashkernel resource shrink
...
Microsoft Edge Mark-Of-The-Web Removal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Microsoft Office Multiple Vulnerabilities (Apr 2025) - Mac OS X
This host is missing an important security update for Microsoft Office on Mac OSX according to Microsoft security update April 2025 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
ROS-20251216-7367
A vulnerability in the Autofill component of Google Chrome and Microsoft Edge browsers is related to errors in the implementation of security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information...
ROS-20251216-7372
A vulnerability in the SplitView component of Google Chrome and Microsoft Edge browsers is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to spoof the user interface...
ROS-20251216-7370
A vulnerability in the Fullscreen UI component of Google Chrome and Microsoft Edge browsers is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to spoof the user interface using a specially crafted HTML pag...
ROS-20251216-7363
A vulnerability in the Extensions component of Google Chrome and Microsoft Edge browsers is related to access control flaws. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...
ROS-20251216-7365
A vulnerability in the Ozone component of Google Chrome and Microsoft Edge browsers is related to memory usage after it has been freed. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity and availability of protected information...
Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense
Today, we are proud to share that Microsoft has been recognized as an overall leader in the KuppingerCole Leadership Compass for Generative AI Defense GAD, an independent report from a leading European analyst firm. This recognition reinforces the work we’ve been doing to deliver enterprise-ready...
KLA90821 DoS vulnerability in Microsoft Browser
Denial of service vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2025-14174 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2025-14174 critical...