ammonia allows stored XSS through unsanitized SVG animate and set attributes
CVE-2026-102342
ammonia allows stored XSS through unsanitized SVG animate and set attributes
#microsoft
共收录 2274 条相关情报。
← 返回所有主题OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison
CVE-2026-49265
OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison
OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
CVE-2026-49264
OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
Vitess vttablet /twopcz reflected XSS
CVE-2026-104252
Vitess vttablet /twopcz reflected XSS
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
CVE-2026-109828
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
Null Pointer Dereference in PKCS#7 bundle with no certificates
CVE-2026-77207
Null Pointer Dereference in PKCS#7 bundle with no certificates
IKEv2 pre-authentication Null Pointer Dereference in EAP code
CVE-2026-77206
IKEv2 pre-authentication Null Pointer Dereference in EAP code
IKEv2 Use-After-Free bug when using IKE-over-TCP
CVE-2026-94453
IKEv2 Use-After-Free bug when using IKE-over-TCP
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tra
containerd: Unpack DoS via repeated opaque whiteouts
CVE-2026-95838
containerd: Unpack DoS via repeated opaque whiteouts
Microsoft QUIC Remote Code Execution Vulnerability
CVE-2026-105016
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
.NET Framework Tampering Vulnerability
CVE-2026-97801
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering ov
Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2026-97781
Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows a
Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2026-108463
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feat
Microsoft Windows Search Component Elevation of Privilege Vulnerability
CVE-2026-108136
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2026-108135
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2026-108471
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to el
Windows Autopilot Elevation of Privilege Vulnerability
CVE-2026-108134
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
MessagePack-CSharp Denial of Service Vulnerability
CVE-2026-92707
Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a networ
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2026-108132
Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.