Web Account Manager Information Disclosure Vulnerability

Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.

Windows GDI+ Information Disclosure Vulnerability

Windows GDI Information Disclosure Vulnerability

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

Microsoft Defender for IoT Information Disclosure Vulnerability

Bot Framework SDK Remote Code Execution Vulnerability

SCOM Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Improper access control in Microsoft Teams allows an unauthorized attacker to disclose information over a network.

Microsoft Raw Image Extension Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.

Microsoft Outlook Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p> <p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.

Microsoft Message Queuing Information Disclosure Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

Windows Deployment Services Information Disclosure Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Windows Print Spooler Information Disclosure Vulnerability

ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

Microsoft AllJoyn API Information Disclosure Vulnerability

Windows DNS Spoofing Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.

OLE Automation Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Windows Network File System Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability