#microsoft

共收录 2275 条相关情报。

← 返回所有主题
安全公告2026-09-17 发布INFO

Chromium CVE-2026-91714: Observable discrepancy

CVE-2026-91714

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Chromium CVE-2026-91713: Missing authorization

CVE-2026-91713

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Chromium CVE-2026-91712: Race condition

CVE-2026-91712

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Chromium CVE-2026-91711: Out of bounds write

CVE-2026-91711

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Chromium CVE-2026-91710: Use after free

CVE-2026-91710

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Chromium CVE-2026-91709: Type confusion

CVE-2026-91709

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Chromium CVE-2026-91708: Race condition

CVE-2026-91708

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P

历史摘要 · 未重新核验 · Microsoft MSRC

威胁情报2026-09-17 发布INFO

From guidance to action: Security fundamentals that materially reduce risk

AI has made fundamental changes to the operating environment for cybersecurity. Explore exposure management guidance on

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

威胁情报2026-09-17 发布INFO

Improving email security outcomes with real-world Microsoft Defender insights

The latest email security benchmarking reports show strong Microsoft Defender performance across pre-delivery and post-d

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

安全公告2026-09-17 发布INFO

Azure Billing Elevation of Privilege Vulnerability

CVE-2026-62874

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges ov

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Database for PostgreSQL Elevation of Privilege Vulnerability

CVE-2026-85878

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a netwo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

M365 Copilot Information Disclosure Vulnerability

CVE-2026-85887

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose informat

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Portal Spoofing Vulnerability

CVE-2026-83946

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthori

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Microsoft Fabric Elevation of Privilege Vulnerability

CVE-2026-69843

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-85889

Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges o

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-85917

Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a netw

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability

CVE-2026-78501

Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Logic Apps Elevation of Privilege Vulnerability

CVE-2026-70200

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Cosmos DB Elevation of Privilege Vulnerability

CVE-2026-87701

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB al

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-17 发布INFO

Azure Logic Apps Elevation of Privilege Vulnerability

CVE-2026-83944

Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC