Microsoft

Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.

Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.

Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.

Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/group_documents/upload stores an attacker-controlled group document filename that group_workspaces.html later interpolates into…

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticated low-privileged user to omit the…

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place…

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in ufo/client/mcp/http_servers/mobile_mcp_server.py pass the authenticated caller-controlled text and package_name parameters…

Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com…

Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.

Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/http_servers/linux_mcp_server.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site…

Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3, the @prompty/core TypeScript loader in runtime/typescript/packages/core/src/core/loader.ts used gray-matter without overriding executable js and javascript frontmatter engines,…

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.3, Kiota is affected by a code-generation injection vulnerability in the C# XML documentation-comment sink (the description, externalDocs label, and externalDocs link fields emitted as /// ……

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.4, Kiota's PHP generator embedded OpenAPI description, default fields, property names, and other schema-derived strings into PHP double-quoted literals through SanitizeDoubleQuote() in…

Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to execute code over a network.

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.

Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally.

Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.

Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.

Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally.

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.

Uncontrolled resource consumption in Windows Remote Desktop Services allows an unauthorized attacker to deny service over a network.

Improper input validation in SQL Server allows an unauthorized attacker to disclose information over a network.

Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.

Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.

Windows Scripting Engine Security Feature Bypass Vulnerability

Microsoft SQL Server Information Disclosure Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Windows Networking Information Disclosure Vulnerability