Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVE-2026-33843
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized
#msrc
共收录 2178 条相关情报。
← 返回所有主题Azure Stack HCI Information Disclosure Vulnerability
CVE-2026-26147
Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.
Microsoft Copilot Tampering Vulnerability
CVE-2026-41090
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut
M365 Copilot Information Disclosure Vulnerability
CVE-2026-42827
Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz
Azure Resource Manager Elevation of Privilege Vulnerability
CVE-2026-47280
Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a net
Microsoft Power Pages Remote Code Execution Vulnerability
CVE-2026-23652
Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an u
Azure Orbital Spatio Remote Code Execution Vulnerability
CVE-2026-40412
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
CVE-2026-42834
Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized
Microsoft Defender Remote Code Execution Vulnerability
CVE-2026-45584
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
Microsoft Defender Elevation of Privilege Vulnerability
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el
Microsoft Defender Denial of Service Vulnerability
CVE-2026-45498
Microsoft Defender Denial of Service Vulnerability
Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-45585
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof
Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
CVE-2026-42822
Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges ove
Chromium: CVE-2026-8587 Use after free in Extensions
CVE-2026-8587
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8586 Inappropriate implementation in Chromoting
CVE-2026-8586
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8585 Inappropriate implementation in Media
CVE-2026-8585
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8584 Inappropriate implementation in Views
CVE-2026-8584
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8582 Object lifecycle issue in Dawn
CVE-2026-8582
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8581 Use after free in GPU
CVE-2026-8581
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-8580 Use after free in Mojo
CVE-2026-8580
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.