Microsoft Copilot in Azure Information Disclosure Vulnerability
CVE-2026-69855
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information o
#windows
共收录 2159 条相关情报。
← 返回所有主题Azure Virtual Machines Elevation of Privilege Vulnerability
CVE-2026-69543
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a
Microsoft Partner Center Information Disclosure Vulnerability
CVE-2026-69558
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-69400
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorize
Azure Data Manager for Energy Remote Code Execution Vulnerability
CVE-2026-69419
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a net
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-68782
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Azure Data Factory Information Disclosure Vulnerability
CVE-2026-66800
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a
Microsoft Fabric Elevation of Privilege Vulnerability
CVE-2026-63509
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVE-2026-65770
Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache
Windows Remote Help Defense Spoofing Vulnerability
CVE-2026-55013
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locall
Microsoft Remote Help Denial of Service Vulnerability
CVE-2026-55015
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.
Microsoft Entra ID Remote Code Execution Vulnerability
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
Microsoft Entra ID Elevation of Privilege Vulnerability
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a
Azure Stack HCI Information Disclosure Vulnerability
CVE-2026-69519
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a networ
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-68789
Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an aut
Azure Data Factory Elevation of Privilege Vulnerability
CVE-2026-62834
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privil
No Linux, No Problem: Fast and Correct Windows Binary Fuzzing via Target-embedded Snapshotting.
本文针对Windows平台二进制程序模糊测试中常见的性能瓶颈与兼容性问题，提出一种名为“目标嵌入式快照”（Target-embedded Snapshotting）的新方法。传统模糊测试通常依赖Linux环境下的进程快照/恢复机制，而在Wi