Filtered by vendor Microsoft
Subscribe
Total
25621 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-57100 | 1 Microsoft | 1 Entra Provisioning Service | 2026-07-08 | N/A | 9.9 CRITICAL |
| Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-9182 | 3 Esri, Linux, Microsoft | 3 Arcgis Server, Linux Kernel, Windows | 2026-07-08 | N/A | 9.8 CRITICAL |
| Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload, potentially allowing for other attacks. This issue impacts all versions of ArcGIS Server on Windows and Linux 12.0 and prior. This issue does not impact ArcGIS Enterprise for Kubernetes. | |||||
| CVE-2026-9181 | 3 Esri, Linux, Microsoft | 3 Arcgis Server, Linux Kernel, Windows | 2026-07-08 | N/A | 9.8 CRITICAL |
| Esri ArcGIS Server contains a directory traversal vulnerability. ArcGIS Enterprise on Kubernetes is not impacted. An unauthenticated attacker could exploit this issue by sending crafted path parameters. Successful exploitation could allow overwriting sensitive files on the system. Abuse of this issue can allow full administrative access to ArcGIS Server, with high impact to confidentiality, integrity, and availability. This issue impacts all versions of ArcGIS Server on Windows and Linux 12.0 and prior. This issue does not impact ArcGIS Enterprise for Kubernetes. | |||||
| CVE-2026-58523 | 2 Google, Microsoft | 2 Android, Edge Chromium | 2026-07-07 | N/A | 6.5 MEDIUM |
| Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-58522 | 2 Google, Microsoft | 2 Android, Edge Chromium | 2026-07-07 | N/A | 6.8 MEDIUM |
| Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-58300 | 2 Google, Microsoft | 2 Android, Edge Chromium | 2026-07-07 | N/A | 6.2 MEDIUM |
| Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2026-0232 | 2 Microsoft, Paloaltonetworks | 2 Windows, Cortex Xdr Agent | 2026-07-07 | N/A | 4.4 MEDIUM |
| A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection. | |||||
| CVE-2026-0233 | 2 Microsoft, Paloaltonetworks | 2 Windows, Autonomous Digital Experience Manager | 2026-07-07 | N/A | 8.8 HIGH |
| A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges. | |||||
| CVE-2024-43590 | 1 Microsoft | 4 Visual C\+\+ Redistributable, Visual Studio 2017, Visual Studio 2019 and 1 more | 2026-07-07 | N/A | 7.8 HIGH |
| Visual C++ Redistributable Installer Elevation of Privilege Vulnerability | |||||
| CVE-2026-57985 | 1 Microsoft | 1 Edge Chromium | 2026-07-07 | N/A | 7.6 HIGH |
| Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-57984 | 1 Microsoft | 1 Edge Chromium | 2026-07-07 | N/A | 7.5 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-57983 | 1 Microsoft | 1 Edge Chromium | 2026-07-07 | N/A | 8.7 HIGH |
| Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. | |||||
| CVE-2026-57981 | 1 Microsoft | 1 Edge Chromium | 2026-07-07 | N/A | 8.8 HIGH |
| Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-58298 | 1 Microsoft | 1 Edge Chromium | 2026-07-07 | N/A | 7.2 HIGH |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-58296 | 2 Google, Microsoft | 2 Android, Edge Chromium | 2026-07-07 | N/A | 7.1 HIGH |
| Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-58297 | 2 Google, Microsoft | 2 Android, Edge Chromium | 2026-07-07 | N/A | 7.1 HIGH |
| Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-58299 | 2 Google, Microsoft | 2 Android, Edge Chromium | 2026-07-07 | N/A | 7.5 HIGH |
| Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-26145 | 1 Microsoft | 1 Azure Synapse | 2026-07-07 | N/A | 4.8 MEDIUM |
| Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-41106 | 1 Microsoft | 1 365 Copilot | 2026-07-07 | N/A | 9.3 CRITICAL |
| Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-58290 | 1 Microsoft | 1 Edge Chromium | 2026-07-07 | N/A | 7.5 HIGH |
| Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. | |||||