Security Vulnerabilities
Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.
CVSS Score
7.4
EPSS Score
0.001
Published
2026-07-24
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-07-24
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-07-24
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-07-24
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.1
EPSS Score
0.006
Published
2026-07-24
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.007
Published
2026-07-24
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.5
EPSS Score
0.004
Published
2026-07-24
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.007
Published
2026-07-24
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.013
Published
2026-07-24
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.
CVSS Score
6.5
EPSS Score
0.006
Published
2026-07-24