News & Sicurezza

Execution with unnecessary privileges in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.

Improper access control in Azure Logic Apps allows an authorized attacker to elevate privileges over a network.

CVE ID :CVE-2026-42832 Published : May 12, 2026, 6:17 p.m. | 13 minutes ago Description :Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally. Severity: 7.7 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-42825 Published : May 12, 2026, 6:17 p.m. | 13 minutes ago Description :Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. Severity: 7.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-42830 Published : May 12, 2026, 6:17 p.m. | 13 minutes ago Description :Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-42831 Published : May 12, 2026, 6:17 p.m. | 13 minutes ago Description :Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Incorrect implementation of authentication algorithm in Microsoft SSO Plugin for Jira & Confluence allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.