Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

microsoft

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

microsoft

linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID. Prior to 1.8.1, platform/chrome/js/platform-chrome.js:69-88 registers a single declarativeNetRequest rule whose urlFilter is Platform.SSO_URL + "/*", i.e. "https://login.microsoftonline.com/*". Chrome's urlFilter without a | or || anchor is substring-matched against the full request URL. The same applied rule action is modifyHeaders that attaches the Entra ID Primary Refresh Token cookie. The Firefox adapter in platform/firefox/js/platform-firefox.js:53 performs a belt-and-braces startsWith(Platform.SSO_URL) check before injecting the header; the Chrome adapter does not. When the extension holds broad host permissions through the optional_host_permissions: ["https://*/*"] declared in platform/chrome/manifest.json:34, a main-frame navigation to a URL whose path embeds https://login.microsoftonline.com/ causes Chrome to attach the PRT cookie to the request to the attacker-controlled host. This vulnerability is fixed in 1.8.1.

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

microsoft

Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.

microsoft

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.

microsoft

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.

microsoft

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

microsoft

Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.

microsoft

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

microsoft

Improper access control in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

microsoft

Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.

microsoft

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

microsoft

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

microsoft

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

microsoft

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

microsoft

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

microsoft

Insufficient granularity of access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

microsoft

Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

microsoft

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

microsoft

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

microsoft