Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.

microsoft

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.

microsoft

Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

microsoft

Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.

microsoft

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

microsoft

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

microsoft

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

microsoft

Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

microsoft

Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally.

microsoft

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

microsoft

Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network.

microsoft

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

microsoft

Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

microsoft