← Back

Account

account

Vendor: Microsoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-21264
1Microsoft
1Account
Jun 17, 2026
Jan 22, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21396
1Microsoft
1Account
Jun 17, 2026
Jan 29, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.