Filtered by vendor Microsoft
Subscriptions
Total
21888 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-47160 | 2 Ibm, Microsoft | 3 Cognos Controller, Controller, Windows | 2025-08-17 | 8.2 High |
IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. | ||||
CVE-2023-42007 | 3 Ibm, Linux, Microsoft | 6 Aix, Control Center, Linux On Ibm Z and 3 more | 2025-08-17 | 5.4 Medium |
IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. | ||||
CVE-2023-27272 | 3 Ibm, Linux, Microsoft | 3 Aspera Console, Linux Kernel, Windows | 2025-08-17 | 3.1 Low |
IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system. | ||||
CVE-2023-43035 | 3 Ibm, Linux, Microsoft | 6 Aix, Control Center, Linux On Ibm Z and 3 more | 2025-08-17 | 4 Medium |
IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another user on the system. | ||||
CVE-2023-43039 | 3 Ibm, Linux, Microsoft | 3 Openpages With Watson, Linux Kernel, Windows | 2025-08-17 | 6.1 Medium |
IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session | ||||
CVE-2024-49541 | 3 Adobe, Apple, Microsoft | 3 Illustrator, Macos, Windows | 2025-08-15 | 5.5 Medium |
Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | ||||
CVE-2025-49736 | 2 Google, Microsoft | 2 Android, Edge | 2025-08-15 | 4.3 Medium |
The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. | ||||
CVE-2025-49712 | 1 Microsoft | 3 Sharepoint Enterprise Server 2016, Sharepoint Server, Sharepoint Server 2010 | 2025-08-15 | 8.8 High |
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ||||
CVE-2025-49707 | 1 Microsoft | 2 Azure, Azure Virtual Machine | 2025-08-15 | 7.9 High |
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally. | ||||
CVE-2025-49755 | 2 Google, Microsoft | 2 Android, Edge | 2025-08-15 | 4.3 Medium |
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. | ||||
CVE-2025-53787 | 1 Microsoft | 3 365, 365 Copilot, 365 Copilot Chat | 2025-08-15 | 8.2 High |
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | ||||
CVE-2025-53774 | 1 Microsoft | 3 365, 365 Copilot, 365 Copilot Chat | 2025-08-15 | 6.5 Medium |
Microsoft 365 Copilot BizChat Information Disclosure Vulnerability | ||||
CVE-2025-53767 | 1 Microsoft | 2 Azure, Azure Openai | 2025-08-15 | 10 Critical |
Azure OpenAI Elevation of Privilege Vulnerability | ||||
CVE-2025-53792 | 1 Microsoft | 2 Azure, Azure Portal | 2025-08-15 | 9.1 Critical |
Azure Portal Elevation of Privilege Vulnerability | ||||
CVE-2025-48807 | 1 Microsoft | 17 Hyper-v, Server, Windows and 14 more | 2025-08-15 | 7.5 High |
Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to execute code locally. | ||||
CVE-2025-53793 | 1 Microsoft | 1 Azure Stack Hub | 2025-08-15 | 7.5 High |
Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network. | ||||
CVE-2025-53789 | 1 Microsoft | 17 Server, Windows, Windows 10 1507 and 14 more | 2025-08-15 | 7.8 High |
Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-53788 | 1 Microsoft | 1 Windows Subsystem For Linux | 2025-08-15 | 7 High |
Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | ||||
CVE-2025-53784 | 1 Microsoft | 7 365, 365 Apps, Office and 4 more | 2025-08-15 | 8.4 High |
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||||
CVE-2025-53783 | 1 Microsoft | 2 Teams, Teams For Mac | 2025-08-15 | 7.5 High |
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network. |