Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-70332
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allo
#windows
共收录 2159 条相关情报。
← 返回所有主题Microsoft 365 Admin Center Elevation of Privilege Vulnerability
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevat
Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
CVE-2026-63508
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elev
Azure Service Bus Remote Code Execution Vulnerability
CVE-2026-50515
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Azure SQL Database Elevation of Privilege Vulnerability
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Microsoft Teams Elevation of Privilege Vulnerability
CVE-2026-65667
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Azure SRE Agent Elevation of Privilege Vulnerability
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Azure Logic Apps Information Disclosure Vulnerability
CVE-2026-56161
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Application Insights Profiler Elevation of Privilege Vulnerability
CVE-2026-49163
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove
Microsoft Teams Spoofing Vulnerability
CVE-2026-62918
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing
Azure Active Directory Elevation of Privilege Vulnerability
CVE-2026-50481
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privile
Microsoft Power Apps Elevation of Privilege Vulnerability
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
CVE-2026-65668
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a netwo
Microsoft Teams Elevation of Privilege Vulnerability
CVE-2026-62896
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Azure SQL Managed Instance Elevation of Privilege Vulnerability
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized
Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS
CVE-2026-18013
CVE-2026-18013 是 Chromium 项目中的一个安全漏洞，其问题类型为“不恰当的实现”（Inappropriate implementation），主要影响 Chrome for iOS 浏览器。由于 Microsoft E
Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS
CVE-2026-18016
CVE-2026-18016 是一个由 Chromium 项目分配并修复的安全漏洞，涉及 Chrome for iOS 中的策略执行不足（Insufficient policy enforcement）。该漏洞由 Google Chrome
Chromium: CVE-2026-17835 Inappropriate implementation in Chrome for iOS
CVE-2026-17835
该CVE由Google Chrome团队分配，涉及Chrome for iOS中的“不当实现”（Inappropriate implementation）类安全问题。由于Microsoft Edge（基于Chromium内核）会集成Chro
Chromium: CVE-2026-17838 Incorrect security UI in Chrome for iOS
CVE-2026-17838
CVE-2026-17838 是 Chromium 项目中的一个安全性用户界面（Security UI）显示不当漏洞，主要影响 Chrome for iOS 以及所有基于 Chromium 内核的浏览器（如 Microsoft Edge）。