#msrc

共收录 2178 条相关情报。

← 返回所有主题
安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7927 Type Confusion in Runtime

CVE-2026-7927

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7926 Use after free in PresentationAPI

CVE-2026-7926

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7928 Use after free in WebRTC

CVE-2026-7928

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7930 Insufficient validation of untrusted input in Cookies

CVE-2026-7930

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7929 Use after free in MediaRecording

CVE-2026-7929

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7932 Insufficient policy enforcement in Downloads

CVE-2026-7932

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7933 Out of bounds read in WebCodecs

CVE-2026-7933

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7936 Object lifecycle issue in V8

CVE-2026-7936

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Chromium: CVE-2026-7935 Inappropriate implementation in Speech

CVE-2026-7935

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure Cloud Shell Spoofing Vulnerability

CVE-2026-35428

Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unaut

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure DevOps Information Disclosure Vulnerability

CVE-2026-42826

Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose i

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure AI Foundry Elevation of Privilege Vulnerability

CVE-2026-35435

Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Microsoft Partner Center Spoofing Vulnerability

CVE-2026-34327

Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attac

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

CVE-2026-33844

Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code o

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Microsoft Team Events Portal Information Disclosure Vulnerability

CVE-2026-33823

Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure Machine Learning Notebook Spoofing Vulnerability

CVE-2026-32207

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Microsoft Enterprise Security Token Service (ESTS) Spoofing Vulnerability

CVE-2026-40379

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

CVE-2026-33109

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code ove

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-07 发布INFO

Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability

CVE-2026-41105

Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges ove

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-05-01 发布INFO

Chromium: CVE-2026-7355 Use after free in Media

CVE-2026-7355

This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC