Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

Microsoft OneNote Spoofing Vulnerability

Microsoft Office Spoofing Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Windows SMB Client Security Feature Bypass Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

Microsoft Office Spoofing Vulnerability

Windows NTLM Spoofing Vulnerability

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Windows NTLM Spoofing Vulnerability

Active Directory Federation Server Spoofing Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

Windows Themes Spoofing Vulnerability

.NET and Visual Studio Information Disclosure Vulnerability

Microsoft Outlook Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability

Skype Extension for Chrome Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Windows Themes Spoofing Vulnerability

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Windows Themes Spoofing Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Outlook Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Windows Remote Assistance Information Disclosure Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft SharePoint Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Outlook Spoofing Vulnerability

External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.