Browse CVEs

CRITICAL 9.3 CVE-2026-41106 Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. 365 Copilot Mitigation only Fix from $2,3002026-07-02 HIGH 8.8 CVE-2026-47645 Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges ov… 365 Copilot Mitigation only Fix from $1,9502026-06-19 CRITICAL 9.3 CVE-2026-33102 Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. 365 Copilot Mitigation only Fix from $2,3002026-04-23 MEDIUM 6.8 CVE-2024-43543 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.6414 / 10.0.19044.5011+ Fix from $1,6002024-10-08 MEDIUM 6.8 CVE-2024-43536 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.6414 / 10.0.19044.5011+ Fix from $1,6002024-10-08 HIGH 8.2 CVE-2024-38211 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Dynamics 365 Patch available Fix from $1,9502024-08-13 MEDIUM 6.1 CVE-2023-24935 Microsoft Edge (Chromium-based) Spoofing Vulnerability Edge Chromium 112.0.5615.49+ Fix from $1,6002023-04-11 HIGH 8.2 CVE-2023-24892 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability Edge Chromium 111.0.1661.41+ Fix from $1,9502023-03-14 MEDIUM 6.1 CVE-2020-1323 An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could send a link… Sharepoint Enterprise Server Patch available Fix from $1,6002020-06-09 MEDIUM 6.1 CVE-2020-1220 A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromi… Edge Patch available Fix from $1,6002020-06-09 MEDIUM 6.1 CVE-2019-1486 A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specifie… Visual Studio 2019 1.0.1374+ Fix from $1,6002019-12-10 MEDIUM 6.1 CVE-2019-1075 A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'. Asp.net Core Patch available Fix from $1,6002019-07-15 MEDIUM 5.5 CVE-2019-0540EPSS 13% A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file,… Excel Viewer Patch available Fix from $1,6002019-03-05 MEDIUM 6.5 CVE-2018-0924EPSS 8% Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 C… Exchange Server Patch available Fix from $1,6002018-03-14 HIGH 8.8 CVE-2017-11879EPSS 9% ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP… Asp.net Core Patch available Fix from $1,9502017-11-15 MEDIUM 6.1 CVE-2017-8621 Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnera… Exchange Server Patch available Fix from $1,6002017-07-11 MEDIUM 5.8 CVE-2005-0420EPSS 26% Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the … Exchange Server No fix yet Fix from $1,6002005-04-27