CVE Watchtower

Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.

Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows an authorized attacker to disclose info...

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att...

Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.

Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to exe...

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized att...

Insufficiently protected credentials in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information ov...

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Authentication Library for JavaScript allo...

Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges over a network.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.