Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.May 12, 2026
- Critical9.9Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.May 12, 2026
- Medium5.3linux-entra-sso is a browser plugin for Linux to SSO on Microsoft Entra ID.May 12, 2026
- Medium6.2Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.May 12, 2026
- Medium5.5Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.May 12, 2026
- Medium5.5Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally.May 12, 2026
- Medium4.4Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.May 12, 2026
- High8.8Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network.May 12, 2026
- High8.8Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally.May 12, 2026
- High7.8Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.May 12, 2026
- High7.8Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.May 12, 2026
- Medium4.4Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature locally.May 12, 2026
- High8.8An access issue was addressed with additional sandbox restrictions.EPSS 0.1%May 12, 2026
- Medium6.0Zulip is an open-source team collaboration tool.May 12, 2026
- High8.8Improper access control for some Intel Vision software for all versions within Ring 3: User Applications may allow a denial of service.May 12, 2026
- Medium4.3Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no.May 12, 2026
- High7.5A permissions issue was addressed with additional restrictions.May 11, 2026
- Medium5.5This issue was addressed by adding an additional prompt for user consent.May 11, 2026
- Medium5.5A permissions issue was addressed with additional restrictions.May 11, 2026
- High8.8A permissions issue was addressed with additional restrictions.May 11, 2026
- High7.5This issue was addressed with improved checks to prevent unauthorized actions.May 11, 2026
- High7.5A privacy issue was addressed with improved checks.May 11, 2026
- Low3.3An issue with app access to camera metadata was addressed with improved logic.May 11, 2026
- High7.5A permissions issue was addressed with additional restrictions.May 11, 2026
- Medium6.5This issue was addressed through improved state management.May 11, 2026