#microsoft

共收录 2304 条相关情报。

← 返回所有主题
安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84334 Incorrect authorization in Chromoting

CVE-2026-84334

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings

CVE-2026-84332

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84331 Incorrect authorization in Actor

CVE-2026-84331

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84329 Confused deputy in CredentialProvider

CVE-2026-84329

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84328 Missing authorization in FileSystem

CVE-2026-84328

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84327 Incorrect authorization in Autofill

CVE-2026-84327

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84326 Uninitialized resource in V8

CVE-2026-84326

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84325 Improper input validation in DataTransfer

CVE-2026-84325

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84324 Use after free in Proxy

CVE-2026-84324

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84323 Missing authorization in FileSystem

CVE-2026-84323

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

威胁情报2026-09-03 发布INFO

ASCII smuggling crosses over from AI prompt injection to phishing evasion

Invisible Unicode characters popularized for hiding instructions from AI models are now being used to obfuscate words be

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

安全公告2026-09-03 发布INFO

Microsoft Entra ID Elevation of Privilege Vulnerability

CVE-2026-62916

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Entra ID Elevation of Privilege Vulnerability

CVE-2026-83941

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Azure Cosmos DB Spoofing Vulnerability

CVE-2026-69857

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Power Automate Elevation of Privilege Vulnerability

CVE-2026-65818

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Copilot Studio Elevation of Privilege Vulnerability

CVE-2026-80098

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

CVE-2026-83711

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Microsoft Fabric Elevation of Privilege Vulnerability

CVE-2026-70178

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Azure AI Language Elevation of Privilege Vulnerability

CVE-2026-70352

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Microsoft Discovery Studio Information Disclosure Vulnerability

CVE-2026-62906

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att

历史摘要 · 未重新核验 · Microsoft MSRC