'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove
#advisory
共收录 23530 条相关情报。
← 返回所有主题Improper access control in Azure Logic Apps allows an authorized attacker to disclose information...
CVE-2026-56161
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate...
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute...
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an...
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view....
CVE-2026-71446
AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedde
AIL Project contains a stored cross-site scripting vulnerability in the translation controls...
CVE-2026-71447
AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate...
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized...
CVE-2026-50481
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privile
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import...
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-B
Improper limitation of a pathname to a restricted directory ('path traversal') in Application...
CVE-2026-49163
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds...
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A ma
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2026-15805
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized...
CVE-2026-62918
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a...
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance...
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker...
CVE-2026-17264
Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the...
CVE-2026-70640
llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrap
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA...
CVE-2026-70638
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where th
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags...
CVE-2026-71445
AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occu