Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-21385 1Microsoft 1Purview Jun 17, 2026 Jan 9, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.
CVE-2024-43106 1Microsoft 1Excel Jun 17, 2026 Dec 18, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a libr...Show more A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-42220 1Microsoft 1Outlook Jun 17, 2026 Dec 18, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject...Show more A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-42004 1Microsoft 1Teams Jun 17, 2026 Dec 18, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious...Show more A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-41165 1Microsoft 1Word Jun 17, 2026 Dec 18, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a librar...Show more A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-41159 1Microsoft 1Onenote Jun 17, 2026 Dec 18, 2024 N/A· v4 7.1 HIGH· v3 N/A· v2 A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a...Show more A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-41145 1Microsoft 1Teams Jun 17, 2026 Dec 18, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a...Show more A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-41138 1Microsoft 1Teams Jun 17, 2026 Dec 18, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access p...Show more A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2024-39804 1Microsoft 1Powerpoint Jun 17, 2026 Dec 18, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inj...Show more A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then make use of the vulnerable application's permissions.Show less
CVE-2022-40733 1Microsoft 2Windows 11 21h2 Windows Server 2022 Jun 17, 2026 Dec 18, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 20...Show more An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.Show less
CVE-2022-40732 1Microsoft 2Windows 11 21h2 Windows Server 2022 Jun 17, 2026 Dec 18, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 20...Show more An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.Show less
CVE-2024-49147 1Microsoft 1Update Catalog Jun 17, 2026 Dec 12, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver.
CVE-2024-49071 1Microsoft 1Defender For Endpoint Jun 17, 2026 Dec 12, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.
CVE-2024-49142 1Microsoft 4365 Apps AccessOffice+1 more Jun 17, 2026 Dec 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Access Remote Code Execution Vulnerability
CVE-2024-49138 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Dec 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49132 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Jun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2024-49129 1Microsoft 5Windows Server 2012 Windows Server 2016Windows Server 2019+2 more Jun 17, 2026 Dec 12, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
CVE-2024-49128 1Microsoft 6Windows Server 2012 Windows Server 2016Windows Server 2019+3 more Jun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
CVE-2024-49127 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVE-2024-49126 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Dec 12, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

Previous 1...200201202...814 Next