Chromium CVE-2026-91709: Type confusion
CVE-2026-91709
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
#msrc
共收录 2151 条相关情报。
← 返回所有主题Chromium CVE-2026-91708: Race condition
CVE-2026-91708
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. P
Azure Billing Elevation of Privilege Vulnerability
CVE-2026-62874
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges ov
Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CVE-2026-85878
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a netwo
M365 Copilot Information Disclosure Vulnerability
CVE-2026-85887
Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose informat
Azure Portal Spoofing Vulnerability
CVE-2026-83946
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthori
Microsoft Fabric Elevation of Privilege Vulnerability
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo
Azure AI Foundry Elevation of Privilege Vulnerability
CVE-2026-85889
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges o
Azure AI Foundry Elevation of Privilege Vulnerability
CVE-2026-85917
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a netw
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
CVE-2026-78501
Improper neutralization of special elements used in a command ('command injection') in Microsoft 365 Copilot's Business
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-70200
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize
Azure Cosmos DB Elevation of Privilege Vulnerability
CVE-2026-87701
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB al
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-83944
Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Microsoft 365 Copilot Elevation of Privilege Vulnerability
CVE-2026-85885
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized
Azure Machine Learning Information Disclosure Vulnerability
CVE-2026-68791
Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-69399
Azure Arc Elevation of Privilege Vulnerability
Microsoft Dataverse Elevation of Privilege Vulnerability
CVE-2026-77903
Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a ne
Microsoft Container Registry Elevation of Privilege Vulnerability
CVE-2026-69865
Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elev
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-70009
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attac
Microsoft Copilot Information Disclosure Vulnerability
CVE-2026-55946
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut