Výsledky hledání

zdroj: Microsoft Security× v celém archivu zrušit filtry

2906 karet z 2906 položek · strana 38 z 49 CZ · EN/orig

3. 7. 2026 20

CVE-2026-58522 Microsoft Edge for Android Information Disclosure Vulnerability

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

EPSS 0.00 CVE-2026-58522 Microsoft US

CVE-2026-58299 Microsoft Edge for Android Remote Code Execution Vulnerability

Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.

EPSS 0.00 CVE-2026-58299 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-58287 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-58287 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-58283 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.00 CVE-2026-58283 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-58282 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.00 CVE-2026-58282 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-56646 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.01 CVE-2026-56646 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57993 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.01 CVE-2026-57993 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57992 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-57992 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57988 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-57988 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57987 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

EPSS 0.01 CVE-2026-57987 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57985 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-57985 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57984 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-57984 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57983 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

EPSS 0.01 CVE-2026-57983 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-57975 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-57975 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-56645 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

EPSS 0.01 CVE-2026-56645 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-55945 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.

EPSS 0.00 CVE-2026-55945 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-45489 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Information published.

EPSS 0.01 CVE-2026-45489 Microsoft US

Microsoft Security · 3. 7. 16:00

CVE-2026-4360 Tarfile.extract() doesn't fully respect filter parameter

Information published.

EPSS 0.00 CVE-2026-4360 US

Microsoft Security · 3. 7. 10:04

CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Information published.

EPSS 0.01 CVE-2026-56149 Elasticsearch US

Microsoft Security · 3. 7. 10:02

CVE-2026-49090 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Information published.

EPSS 0.00 CVE-2026-49090 Elasticsearch US

Microsoft Security · 3. 7. 10:01

2. 7. 2026 5

CVE-2026-54998 Microsoft Exchange Online Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-54998 Microsoft US

Microsoft Security · 2. 7. 16:00

CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-41106 Microsoft US

Microsoft Security · 2. 7. 16:00

CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-26145 Microsoft US

Microsoft Security · 2. 7. 16:00

CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-45499 US

Microsoft Security · 2. 7. 16:00

CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

EPSS 0.01 CVE-2026-57100 Microsoft US

Microsoft Security · 2. 7. 16:00