Cwe is not in rca categories in Microsoft Authenticator allows an unauthorized attacker to disclose

microsoft authenticator

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized

microsoft azure_ad_ssh_login_extension_for_linux

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

microsoft 365_apps

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.

microsoft azure_automation_hybrid_worker_windows_extension

Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileg

microsoft office

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform

microsoft azure_iot_explorer

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate priv

microsoft azure_mcp_server microsoft azure_mcp_server

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allo

microsoft arc_enabled_servers_azure_connected_machine_agent

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server a

microsoft sql_server_2016 microsoft sql_server_2017 +3个

Improper validation of specified type of input in SQL Server allows an authorized attacker to elevat

microsoft sql_server_2016 microsoft sql_server_2017 +3个

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to ex

microsoft sharepoint_server microsoft sharepoint_server

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code lo

microsoft 365_apps microsoft office +6个

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute c

microsoft 365_apps microsoft excel +4个

Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an unautho

microsoft windows_server_2012 microsoft windows_server_2012 +4个

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthor

microsoft 365_apps microsoft office +4个

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally

microsoft 365_apps microsoft excel +4个

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code

microsoft 365_apps microsoft excel +5个

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

microsoft 365_apps microsoft excel +4个

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute co

microsoft sharepoint_server microsoft sharepoint_server +1个

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Of

microsoft sharepoint_server microsoft sharepoint_server +1个