#microsoft

共收录 2351 条相关情报。

← 返回所有主题
安全公告2026-05-07 发布INFO

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

CVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code ove

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability

CVE-2026-41105

Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges ove

历史摘要 · 未重新核验 · Microsoft MSRC

威胁情报2026-05-06 发布INFO

​​Microsoft named an overall leader in KuppingerCole Analyst’s 2026 Emerging AI Security Operations Center (SOC) report ​​

Microsoft is excited to be named an Overall Leader, and the Market Leader in the Kuppinger Cole Analyst’s 2026 Emerging

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-06 发布INFO

ClickFix campaign uses fake macOS utilities lures to deliver infostealers

Threat actors are targeting macOS users with fake utility fixes that trick them into running malicious Terminal commands

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-04 发布INFO

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

Microsoft Defender Research observed a large-scale credential theft campaign that exemplifies this trend, using code of

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-02 发布INFO

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

CVE-2026-31431

2026年5月,微软安全博客披露了一个影响Linux系统的高危漏洞CVE-2026-31431,命名为“Copy Fail”。该漏洞允许攻击者在云环境和Kubernetes工作负载中实现本地权限提升至root。漏洞根因在于Linux文件复制

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-05-01 发布INFO

Microsoft Agent 365, now generally available, expands capabilities and integrations

​Today we’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7355 Use after free in Media

CVE-2026-7355

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7340 Integer overflow in ANGLE

CVE-2026-7340

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7339 Heap buffer overflow in WebRTC

CVE-2026-7339

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7341 Use after free in WebRTC

CVE-2026-7341

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7338 Use after free in Cast

CVE-2026-7338

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7345 Insufficient validation of untrusted input in Feedback

CVE-2026-7345

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7346 Inappropriate implementation in Tint

CVE-2026-7346

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7347 Use after free in Chromoting

CVE-2026-7347

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7337 Type Confusion in V8

CVE-2026-7337

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7336 Use after free in WebRTC

CVE-2026-7336

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7335 Use after free in media

CVE-2026-7335

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7348 Use after free in Codecs

CVE-2026-7348

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7349 Use after free in Cast

CVE-2026-7349

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC