#msrc

共收录 2151 条相关情报。

← 返回所有主题
安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84332 Incorrect authorization in SiteSettings

CVE-2026-84332

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84331 Incorrect authorization in Actor

CVE-2026-84331

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84329 Confused deputy in CredentialProvider

CVE-2026-84329

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84328 Missing authorization in FileSystem

CVE-2026-84328

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84327 Incorrect authorization in Autofill

CVE-2026-84327

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84326 Uninitialized resource in V8

CVE-2026-84326

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84325 Improper input validation in DataTransfer

CVE-2026-84325

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84324 Use after free in Proxy

CVE-2026-84324

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Chromium: CVE-2026-84323 Missing authorization in FileSystem

CVE-2026-84323

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Microsoft Entra ID Elevation of Privilege Vulnerability

CVE-2026-62916

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevat

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Entra ID Elevation of Privilege Vulnerability

CVE-2026-83941

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Azure Cosmos DB Spoofing Vulnerability

CVE-2026-69857

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing ov

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Power Automate Elevation of Privilege Vulnerability

CVE-2026-65818

Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Copilot Studio Elevation of Privilege Vulnerability

CVE-2026-80098

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

CVE-2026-83711

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Microsoft Fabric Elevation of Privilege Vulnerability

CVE-2026-70178

Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Azure AI Language Elevation of Privilege Vulnerability

CVE-2026-70352

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Microsoft Discovery Studio Information Disclosure Vulnerability

CVE-2026-62906

Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized att

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep

CVE-2026-19953

URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in

历史摘要 · 未重新核验 · Microsoft MSRC

安全公告2026-09-03 发布INFO

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

CVE-2026-13732

Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf

历史摘要 · 未重新核验 · Microsoft MSRC