CVE-2026-41100

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally...

CVE-2025-59200

Concurrent execution using shared resource with improper synchronization 'race condition' in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally...

CVE-2025-49707

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...