Chromium: CVE-2026-8520 Race in Payments
CVE-2026-8520
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
#microsoft
共收录 2351 条相关情报。
← 返回所有主题Azure Virtual Network Gateway Remote Code Execution Vulnerability
CVE-2026-40411
Azure Virtual Network Gateway 是 Azure 云平台中用于建立站点到站点 VPN 或点到站点 VPN 连接的关键网络组件。该漏洞（CVE-2026-40411）源于网关对特定网络请求的输入验证不足，导致已获得
Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
CVE-2026-35430
Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized atta
Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability
CVE-2026-23663
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-42901
Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
Microsoft Planetary Computer Pro Information Disclosure Vulnerability
CVE-2026-41104
Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose inform
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-45659
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-33843
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized
Azure Stack HCI Information Disclosure Vulnerability
CVE-2026-26147
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.
Microsoft Copilot Tampering Vulnerability
CVE-2026-41090
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
M365 Copilot Information Disclosure Vulnerability
CVE-2026-42827
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz
Azure Resource Manager Elevation of Privilege Vulnerability
CVE-2026-47280
Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a net
Microsoft Power Pages Remote Code Execution Vulnerability
CVE-2026-23652
Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an u
Azure Orbital Spatio Remote Code Execution Vulnerability
CVE-2026-40412
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation env
Securing the gaming culture of cultures
Read about the unique challenges and rewards of securing gaming platforms and how to better protect gaming communities.
Introducing RAMPART and Clarity: Open source tools to bring safety into Agent development workflow
The AI systems shipping inside enterprises today are fundamentally different from the ones we were building even two yea
Exposing Fox Tempest: A malware-signing service operation
Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cyber
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
CVE-2026-42834
Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized
Microsoft Defender Remote Code Execution Vulnerability
CVE-2026-45584
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.