Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
CVE-2026-58023
Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
#microsoft
共收录 2304 条相关情报。
← 返回所有主题Apache Thrift: c_glib TLS Client Missing Hostname Verification
CVE-2026-48144
Apache Thrift: c_glib TLS Client Missing Hostname Verification
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
CVE-2026-64549
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
CVE-2026-64544
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
drm/edid: fix OOB read in drm_parse_tiled_block()
CVE-2026-64546
drm/edid: fix OOB read in drm_parse_tiled_block()
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
CVE-2026-64547
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Azure Confidential Ledger Remote Code Execution Vulnerability
CVE-2026-68823
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a n
Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-70332
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
Microsoft 365 Admin Center Elevation of Privilege Vulnerability
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat
Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
CVE-2026-63508
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elev
Azure Service Bus Remote Code Execution Vulnerability
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Microsoft Teams Elevation of Privilege Vulnerability
CVE-2026-65667
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Azure SRE Agent Elevation of Privilege Vulnerability
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Azure Logic Apps Information Disclosure Vulnerability
CVE-2026-56161
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Application Insights Profiler Elevation of Privilege Vulnerability
CVE-2026-49163
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove
Microsoft Teams Spoofing Vulnerability
CVE-2026-62918
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing
Azure Active Directory Elevation of Privilege Vulnerability
CVE-2026-50481
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privile
Microsoft Power Apps Elevation of Privilege Vulnerability
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.