Chromium: CVE-2026-76034 Buffer overflow in WebGL
CVE-2026-76034
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
#microsoft
共收录 2304 条相关情报。
← 返回所有主题Chromium: CVE-2026-76033 Inappropriate implementation in CORS
CVE-2026-76033
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Exchange Online Elevation of Privilege Vulnerability
CVE-2026-65801
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a ne
Microsoft Word Information Disclosure Vulnerability
CVE-2026-70105
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a networ
Microsoft Copilot in Azure Information Disclosure Vulnerability
CVE-2026-69855
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information o
Azure Virtual Machines Elevation of Privilege Vulnerability
CVE-2026-69543
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a
Microsoft Partner Center Information Disclosure Vulnerability
CVE-2026-69558
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-69400
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize
Azure Data Manager for Energy Remote Code Execution Vulnerability
CVE-2026-69419
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a net
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Azure Data Factory Information Disclosure Vulnerability
CVE-2026-66800
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a
Microsoft Fabric Elevation of Privilege Vulnerability
CVE-2026-63509
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVE-2026-65770
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache
Windows Remote Help Defense Spoofing Vulnerability
CVE-2026-55013
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locall
Microsoft Remote Help Denial of Service Vulnerability
CVE-2026-55015
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.
Microsoft Entra ID Remote Code Execution Vulnerability
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.