No Title
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
#msrc
共收录 2178 条相关情报。
← 返回所有主题No Title
微软MSRC于2026年4月28日发布了关于Microsoft Entra ID Entitlement Management中服务器端请求伪造（SSRF）漏洞的安全公告。该漏洞允许未经授权的攻击者通过网络进行欺骗攻击（spoofing）。
No Title
微软官方披露 Microsoft Power Apps 存在一个不受控制的搜索路径元素漏洞（Uncontrolled Search Path Element）。该漏洞允许未经授权的攻击者通过网络在受影响系统上执行代码。漏洞成因是 Power
No Title
Azure IoT Central 是微软提供的物联网平台即服务，用于连接、监控和管理 IoT 设备。该平台存在一个信息泄露漏洞，其成因是系统未正确限制对敏感信息的访问，导致授权攻击者能够通过网络向未授权角色暴露敏感信息。攻击者可以利用此漏
No Title
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.
No Title
Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a net
No Title
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.
No Title
Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privilege
No Title
Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofin
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title
No Title