Microsoft
microsoft
14,951 CVEs • 1,050 products
Products (1,050)
Click to collapseToggle
Products (1,050)
Click to collapse
CVEs (14,951)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreJun 17, 2026 Feb 10, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. |
Improper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code locally. |
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
Azure Front Door Elevation of Privilege Vulnerability |
Azure Function Information Disclosure Vulnerability |
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. |
Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.1, the `makerjs.extendObject` function copies properties from source objects without proper validati...Show more |
1Microsoft 3365 Apps OfficeOffice Long Term Servicing ChannelJun 25, 2026 Jan 26, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. |
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network. |
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network. |
Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network. |
Azure Entra ID Elevation of Privilege Vulnerability |
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network. |
Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network. |
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector |
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network. |
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. |
Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally. |
Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network. |