#windows

共收录 2159 条相关情报。

← 返回所有主题

安全公告2026-07-23 发布INFO

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

CVE-2026-58630

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Azure Key Vault Elevation of Privilege Vulnerability

CVE-2026-62825

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Microsoft M365 Copilot Remote Code Execution Vulnerability

CVE-2026-50517

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Microsoft Graph Information Disclosure Vulnerability

CVE-2026-49159

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Azure API Management (APIM) Remote Code Execution Vulnerability

CVE-2026-35425

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

CVE-2026-56160

Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a netwo

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Microsoft Surface Remote Code Execution Vulnerability

CVE-2026-54120

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Microsoft Account Remote Code Execution Vulnerability

CVE-2026-56165

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-23 发布INFO

Azure AI Search Elevation of Privilege Vulnerability

CVE-2026-56167

Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-21 发布INFO

FFC-DH Peer Validation Uses Attacker-Supplied q

CVE-2026-42770

FFC-DH Peer Validation Uses Attacker-Supplied q

历史摘要 · 未重新核验 · Microsoft MSRC

#microsoft #msrc #windows

安全公告2026-07-17 发布INFO