CVE Vulnerability Catalog

A user interface misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Microsoft Edge (Chromium-based) contains improper neutralization of special elements in output used by a downstream component (injection), allowing an unauthorized attacker to elevate privileges over a network.

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Kubewarden, a policy engine for Kubernetes, has a policy-level authorization gap. An attacker with privileged AdmissionPolicy or AdmissionPolicyGroup create permissions can use the can_i host callback to issue SubjectAccessReview requests and enumerate RBAC permissions of any user or service account across the cluster, even without a context-aware resource grant.

Prior to 0.2.0-alpha.1, the OpenTelemetry.OpAmp.Client allocates an unbounded buffer to read all bytes from the OpAMP server over HTTP. This could cause memory exhaustion if the OpAMP server is attacker-controlled or the connection is intercepted.

In Fides from 2.75.0 to before 2.83.2, deployments enabling both subject identity verification and duplicate privacy request detection allow an administrator to approve a privacy request whose identity was never verified. For erasure policies, this can result in unauthorized deletion of a data subject's records across all integrations.

In linux-entra-sso prior to 1.8.1, the Chrome adapter registers a declarativeNetRequest rule with urlFilter "https://login.microsoftonline.com/*", which without an anchor is substring-matched against the full request URL, and the modifyHeaders action attaches the Entra ID Primary Refresh Token cookie. When the extension holds broad host permissions (optional_host_permissions "https://*/*"), a main-frame navigation to a URL whose path embeds https://login.microsoftonline.com/ causes the PRT cookie to be attached to the request to an attacker-controlled host.

The SSRF protection in requests-hardened fails to block IP addresses within the RFC 6598 Shared Address Space (100.64.0.0/10). An attacker who can supply arbitrary URLs could exploit this gap to access internal services hosted within that range, e.g., in environments such as AWS EKS.

Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.

Relative path traversal in Visual Studio Code allows an unauthorized attacker to disclose information locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

In Horilla 1.5.0, notification endpoints trust the unvalidated next parameter and redirect users to arbitrary external URLs. This allows an attacker to turn trusted application links into phishing or social-engineering redirects.

M365 Copilot contains an improper access control vulnerability that allows an authorized attacker to perform spoofing locally. The vulnerability enables impersonation of other resources or users in a local environment.

W programie Microsoft Office Word pliki lub katalogi dostępne dla osób zewnętrznych umożliwiają nieautoryzowanemu atakującemu ujawnienie informacji lokalnie.

User interface (UI) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.

Files or directories accessible to external parties in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

W Microsoft Edge (oparty na Chromium) występuje błąd w interfejsie użytkownika, który prowadzi do błędnej prezentacji krytycznych informacji. Umożliwia to nieautoryzowanemu atakującemu przeprowadzenie ataku typu spoofing w sieci.

Illustrator versions 29.8.6, 30.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation requires user interaction, as a victim must open a malicious file.

A NULL Pointer Dereference vulnerability in Illustrator versions 29.8.6, 30.3 and earlier could lead to a denial-of-service (DoS) condition via application crash. Exploitation requires user interaction to open a malicious file.