Microsoft Authenticator Information Disclosure Vulnerability
CVE-2026-41615
Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to
#microsoft
共收录 2351 条相关情报。
← 返回所有主题Accelerating detection engineering using AI-assisted synthetic attack logs generation
What if you could generate realistic attack telemetry on demand? Explore research methods that translate attacker behavi
Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark
Today Microsoft is announcing a major step forward in AI-powered cyber defense: a new multi-model agentic scanning harne
Defending consumer web properties against modern DDoS attacks
Read how to protect consumer websites and defend against modern DDoS attacks with layered security, resilient architectu
Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise
Microsoft Incident Response investigated an attack operated through legitimate and trusted administrative mechanisms to
Microsoft Outlook for iOS Tampering Vulnerability
CVE-2026-42893
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz
AMD: CVE-2025-54518 CPU OP Cache Corruption
CVE-2025-54518
This vulnerability was found and addressed by AMD. We are documenting it in the Security Update Guide to encourage custo
Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
CVE-2026-41103
Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorize
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-34337
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-33835
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-42833
Execution with unnecessary privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute c
Microsoft Office Spoofing Vulnerability
CVE-2026-42832
Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
CVE-2026-42830
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-42823
Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.
Visual Studio Code Elevation of Privilege Vulnerability
CVE-2026-41613
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2026-40381
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Secure Boot Security Feature Bypass Vulnerability
CVE-2026-41097
Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
CVE-2026-41086
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-40420
Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2026-35436
Insufficient granularity of access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate pri