Security Vulnerabilities
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-07-24
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.1
EPSS Score
0.006
Published
2026-07-24
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.007
Published
2026-07-24
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.5
EPSS Score
0.004
Published
2026-07-24
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.007
Published
2026-07-24
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.013
Published
2026-07-24
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
CVSS Score
6.5
EPSS Score
0.006
Published
2026-07-24
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVSS Score
8.3
EPSS Score
0.003
Published
2026-07-23
Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS Score
8.8
EPSS Score
0.003
Published
2026-07-23
Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS Score
8.8
EPSS Score
0.004
Published
2026-07-23