Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-33112 1Microsoft 1Sharepoint Server Jun 17, 2026 May 12, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-33110 1Microsoft 1Sharepoint Server Jun 17, 2026 May 12, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-32209 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.
CVE-2026-32204 1Microsoft 1Azure Monitor Agent Jun 18, 2026 May 12, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-32185 1Microsoft 1Teams Jun 17, 2026 May 12, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Files or directories accessible to external parties in Microsoft Teams allows an unauthorized attacker to perform spoofing locally.
CVE-2026-32177 1Microsoft 4.net .net FrameworkVisual Studio 2022+1 more Jul 15, 2026 May 12, 2026 N/A· v4 7.3 HIGH· v3 N/A· v2 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32175 1Microsoft 3.net Visual Studio 2022Visual Studio 2026 Jun 18, 2026 May 12, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a...Show more A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system. The security update fixes the vulnerability by ensuring .NET Core properly handles files.Show less
CVE-2026-32170 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
CVE-2026-32161 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-21530 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 May 12, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.
CVE-2026-42826 1Microsoft 1Azure Devops Jun 17, 2026 May 7, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.
CVE-2026-41105 1Microsoft 1Azure Monitor Action Group Notification System Jun 17, 2026 May 7, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-35435 1Microsoft 1Azure Ai Foundry Jun 17, 2026 May 7, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-35428 1Microsoft 1Azure Cloud Shell Jun 17, 2026 May 7, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Improper neutralization of special elements used in a command ('command injection') in Azure Cloud Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-34327 1Microsoft 1Partner Center Jun 17, 2026 May 7, 2026 N/A· v4 8.2 HIGH· v3 N/A· v2 Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-33844 1Microsoft 1Azure Managed Instance For Apache Cassandra Jun 17, 2026 May 7, 2026 N/A· v4 9.0 CRITICAL· v3 N/A· v2 Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.
CVE-2026-33823 1Microsoft 1Teams Jun 17, 2026 May 7, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.
CVE-2026-33111 1Microsoft 1Copilot Chat Jun 17, 2026 May 7, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
CVE-2026-33109 1Microsoft 1Azure Managed Instance For Apache Cassandra Jun 17, 2026 May 7, 2026 N/A· v4 9.9 CRITICAL· v3 N/A· v2 Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.
CVE-2026-32207 1Microsoft 1Azure Machine Learning Jun 17, 2026 May 7, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

Previous 1...474849...748 Next