Filtered by vendor Microsoft Subscriptions
Total 21888 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-47160 2 Ibm, Microsoft 3 Cognos Controller, Controller, Windows 2025-08-17 8.2 High
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVE-2023-42007 3 Ibm, Linux, Microsoft 6 Aix, Control Center, Linux On Ibm Z and 3 more 2025-08-17 5.4 Medium
IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2023-27272 3 Ibm, Linux, Microsoft 3 Aspera Console, Linux Kernel, Windows 2025-08-17 3.1 Low
IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system.
CVE-2023-43035 3 Ibm, Linux, Microsoft 6 Aix, Control Center, Linux On Ibm Z and 3 more 2025-08-17 4 Medium
IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system.
CVE-2023-43039 3 Ibm, Linux, Microsoft 3 Openpages With Watson, Linux Kernel, Windows 2025-08-17 6.1 Medium
IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session
CVE-2024-49541 3 Adobe, Apple, Microsoft 3 Illustrator, Macos, Windows 2025-08-15 5.5 Medium
Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2025-49736 2 Google, Microsoft 2 Android, Edge 2025-08-15 4.3 Medium
The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-49712 1 Microsoft 3 Sharepoint Enterprise Server 2016, Sharepoint Server, Sharepoint Server 2010 2025-08-15 8.8 High
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2025-49707 1 Microsoft 2 Azure, Azure Virtual Machine 2025-08-15 7.9 High
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.
CVE-2025-49755 2 Google, Microsoft 2 Android, Edge 2025-08-15 4.3 Medium
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53787 1 Microsoft 3 365, 365 Copilot, 365 Copilot Chat 2025-08-15 8.2 High
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
CVE-2025-53774 1 Microsoft 3 365, 365 Copilot, 365 Copilot Chat 2025-08-15 6.5 Medium
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability
CVE-2025-53767 1 Microsoft 2 Azure, Azure Openai 2025-08-15 10 Critical
Azure OpenAI Elevation of Privilege Vulnerability
CVE-2025-53792 1 Microsoft 2 Azure, Azure Portal 2025-08-15 9.1 Critical
Azure Portal Elevation of Privilege Vulnerability
CVE-2025-48807 1 Microsoft 17 Hyper-v, Server, Windows and 14 more 2025-08-15 7.5 High
Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2025-53793 1 Microsoft 1 Azure Stack Hub 2025-08-15 7.5 High
Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
CVE-2025-53789 1 Microsoft 17 Server, Windows, Windows 10 1507 and 14 more 2025-08-15 7.8 High
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVE-2025-53788 1 Microsoft 1 Windows Subsystem For Linux 2025-08-15 7 High
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
CVE-2025-53784 1 Microsoft 7 365, 365 Apps, Office and 4 more 2025-08-15 8.4 High
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-53783 1 Microsoft 2 Teams, Teams For Mac 2025-08-15 7.5 High
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network.