#microsoft

共收录 2304 条相关情报。

安全公告2026-08-06 发布INFO

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

CVE-2026-65668

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a netwo

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-08-06 发布INFO

Microsoft Teams Elevation of Privilege Vulnerability

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-08-06 发布INFO

Azure SQL Managed Instance Elevation of Privilege Vulnerability

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

威胁情报2026-08-05 发布INFO

Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)

Learn why KuppingerCole named Microsoft a Leader in its Leadership Compass: Cloud Native Application Protection Platform

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #microsoft #malware

威胁情报2026-08-04 发布INFO

ChainDrop supply chain compromise: Anatomy of a self-propagating worm

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosyst

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #malware #microsoft

威胁情报2026-08-04 发布INFO

Advance Zero Trust for AI: New tools and guidance to secure AI agents and DevSecOps

Microsoft expands its Zero Trust for AI strategy to enhance security for AI and DevSecOps environments with new tools an

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #malware #microsoft

威胁情报2026-08-04 发布INFO

128 Seconds to disruption: Microsoft Defender stops ransomware at QNET

Microsoft Defender automatically isolated a compromised QNET endpoint in 128 seconds, stopping a multi-stage attack befo

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #ti #malware #microsoft

威胁情报2026-07-31 发布INFO

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in port

历史摘要 · 未重新核验 · Microsoft Threat Intelligence

#apt #microsoft #malware #ti

安全公告2026-07-31 发布INFO

Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS

CVE-2026-18013

CVE-2026-18013 是 Chromium 项目中的一个安全漏洞，其问题类型为“不恰当的实现”（Inappropriate implementation），主要影响 Chrome for iOS 浏览器。由于 Microsoft E

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-31 发布INFO

Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS

CVE-2026-18016

CVE-2026-18016 是一个由 Chromium 项目分配并修复的安全漏洞，涉及 Chrome for iOS 中的策略执行不足（Insufficient policy enforcement）。该漏洞由 Google Chrome

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-31 发布INFO

Chromium: CVE-2026-17835 Inappropriate implementation in Chrome for iOS

CVE-2026-17835

该CVE由Google Chrome团队分配，涉及Chrome for iOS中的“不当实现”（Inappropriate implementation）类安全问题。由于Microsoft Edge（基于Chromium内核）会集成Chro

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-31 发布INFO

Chromium: CVE-2026-17838 Incorrect security UI in Chrome for iOS

CVE-2026-17838

CVE-2026-17838 是 Chromium 项目中的一个安全性用户界面（Security UI）显示不当漏洞，主要影响 Chrome for iOS 以及所有基于 Chromium 内核的浏览器（如 Microsoft Edge）。

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-31 发布INFO