Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-69400
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize
#msrc
共收录 2151 条相关情报。
← 返回所有主题Azure Data Manager for Energy Remote Code Execution Vulnerability
CVE-2026-69419
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a net
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Azure Data Factory Information Disclosure Vulnerability
CVE-2026-66800
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a
Microsoft Fabric Elevation of Privilege Vulnerability
CVE-2026-63509
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVE-2026-65770
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache
Windows Remote Help Defense Spoofing Vulnerability
CVE-2026-55013
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locall
Microsoft Remote Help Denial of Service Vulnerability
CVE-2026-55015
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.
Microsoft Entra ID Remote Code Execution Vulnerability
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a
Azure Stack HCI Information Disclosure Vulnerability
CVE-2026-69519
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Azure Data Factory Elevation of Privilege Vulnerability
CVE-2026-62834
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privil
Microsoft Copilot Information Disclosure Vulnerability
CVE-2026-24301
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
Chromium: CVE-2026-19560 Use after free in Blink
CVE-2026-19560
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19559 Use after free in HTML
CVE-2026-19559
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19558 Use after free in Extensions
CVE-2026-19558
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-19557 Use after free in TabStrip
CVE-2026-19557
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.