New vulnerabilities – clearly explained

Microsoft Edge (Chromium-based): Use-after-free allows privilege escalation

A use-after-free vulnerability (CWE-416) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over the network, according to the CNA record. The attack requires user interaction, for example opening a malicious web page. The CVSS 3.1 base score is 8.8 (High), and NVD analysis is still pending.

Microsoft · Edge (Chromium-based)

Microsoft Edge (Chromium-based): Heap-based buffer overflow enables code execution

A heap-based buffer overflow (CWE-122) in Microsoft Edge (Chromium-based) allows a remote attacker without privileges to execute code. The victim must take an action, such as visiting a malicious or compromised web page. The CVSS base score is 8.8 (High), but the fixed build is not yet confirmed.

Microsoft · Microsoft Edge (Chromium-based)

Microsoft Edge (Chromium-based): Heap-based buffer overflow allows code execution

A heap-based buffer overflow (CWE-122) in Microsoft Edge (Chromium-based) allows an unauthenticated remote attacker to execute code. The CVSS base score is 8.8 (High). Exploitation requires that a user is tricked into interacting, most likely by opening a malicious web page. CISA SSVC lists exploitation as none and automatable as no.

Microsoft · Edge (Chromium-based)

Microsoft Edge (Chromium-based): Security feature bypass via incomplete input filter

Microsoft Edge (Chromium-based) contains a security feature bypass caused by an incomplete list of disallowed inputs (CWE-184). An unauthenticated remote attacker can bypass a browser security feature over the network. Exploitation requires that a user visits a malicious or crafted web page. Microsoft rates the impact as High for confidentiality, integrity and availability.

Microsoft · Edge (Chromium-based)

Microsoft Edge: Use-after-free vulnerability allows remote code execution

A use-after-free vulnerability (CWE-416) in Microsoft Edge allows an unauthorized attacker to execute code over a network. The description also refers to Edge for iOS, while the affected products are listed as Chromium-based Edge. The CNA rates the issue at CVSS 3.1 8.8 with high impact on confidentiality, integrity and availability, and exploitation requires a user to visit a malicious page or perform a similar action but no privileges. VulDB scores the issue lower (6.3), so the severity assessment is inconsistent across sources.

Microsoft · Edge

Microsoft Edge (Chromium-based): Privilege escalation via integer overflow

Microsoft Edge (Chromium-based) contains an integer overflow or wraparound (CWE-190) that allows an unauthorized attacker to elevate privileges over a network. According to the CNA record, the CVSS vector requires user interaction (UI:R), so exploitation most likely requires a user to visit a malicious or compromised web page. The CVSS score is 8.8 (CNA) but VulDB rates it 6.3 (Medium), and public technical details are limited.

Microsoft · Edge (Chromium-based)

Microsoft Edge (Chromium-based): Remote code execution via heap buffer overflow

Microsoft Edge (Chromium-based) contains a heap-based buffer overflow that allows an unauthenticated remote attacker to execute code. Exploitation requires that a user visits a malicious or compromised web page, for example through phishing or malicious advertising. Microsoft rates the impact as high for confidentiality, integrity and availability, with a CVSS base score of 8.8.

Microsoft · Edge (Chromium-based)

Microsoft Edge (Chromium-based): Double free leads to remote code execution

A double free vulnerability (CWE-415) in Microsoft Edge (Chromium-based) allows an unauthorized remote attacker to execute code. The CVSS 3.1 base score is 8.8 and the vector requires user interaction, so a victim would typically need to open a malicious web page or link. The NVD analysis is still pending, and the vendor's fixed build must be verified against the MSRC entry.

Microsoft · Edge (Chromium-based)

Microsoft Edge

Research and translation in progress – available shortly.

Microsoft Edge (Chromium-based): Remote code execution via type confusion

A type confusion flaw (CWE-843) in Microsoft Edge (Chromium-based) allows an unauthenticated remote attacker to execute code. The attacker must host a specially crafted web page and get a user to visit it with an affected Edge version. Successful exploitation could allow code execution within the browser renderer process, and MSRC does not state whether a sandbox escape is also required.

Microsoft · Edge (Chromium-based)

Microsoft Edge: Remote code execution via double free

A double free vulnerability (CWE-415) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over the network. An attacker needs a user to visit a malicious page or open malicious content, because user interaction is required. The CVSS score is 8.8 (High), and CISA SSVC rates the technical impact as total.

Microsoft · Edge

Microsoft Entra application proxy: Elevation of privilege via improper authentication

Microsoft Entra application proxy (formerly Azure AD Application Proxy) publishes on-premises web applications to remote users. Improper authentication (CWE-287) allows an unauthenticated attacker over the network to elevate privileges. Microsoft rates the flaw critical (CVSS 3.1 base score 10.0) and states that customers need to take no action. No exploitation or public proof of concept was found in the sources retrieved.

Microsoft · Entra application proxy

Microsoft Azure Kubernetes Configuration Service: Elevation of privilege via missing authentication

Microsoft Azure Kubernetes Configuration Service contains a missing authentication check for a critical function (CWE-306). According to the CVE record, an unauthenticated attacker with network access can elevate privileges, with a CVSS 3.1 base score of 10.0 (Critical). Microsoft states that the issue has been fully mitigated on its service side and that customers have no action to take.

Microsoft · Azure Kubernetes Configuration Service

Microsoft VM Inspector for Azure VMs: Elevation of privilege via link following

VM Inspector for Azure Virtual Machines contains an improper link resolution flaw (CWE-59, link following) before file access. A network-based attacker without privileges or user interaction could exploit it to elevate privileges, and the CVSS base score is 10.0 (Critical). Microsoft states that the issue has already been fully mitigated on its side and requires no customer action; the NVD entry was still awaiting analysis at the time of research.

Microsoft · VM Inspector for Azure Virtual Machines

Microsoft Azure Pipelines: Remote code execution via command injection

Azure Pipelines, Microsoft's CI/CD platform, contains a command injection flaw (CWE-77) that allows an unauthenticated attacker to execute code over the network. According to the CVSS vector, no privileges or user interaction are needed and the impact on confidentiality and integrity is high. Microsoft documents this CVE as a cloud service issue for which no customer action is required; the scope for self-hosted agents and on-premises Azure DevOps Server is unknown.

Microsoft · Azure Pipelines

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft SharePoint Server: Path traversal leading to remote code execution

Microsoft SharePoint Server contains a path traversal vulnerability (CWE-22) that allows an authorized attacker to execute code over the network. The official record lists Subscription Edition with versions from 16.0.0 to before 16.0.20326.20190, and the attacker needs a low-privilege account. Successful exploitation could lead to full compromise of the SharePoint host and its data.

Microsoft · SharePoint Server

Microsoft Office Word: Remote code execution due to numeric truncation

A numeric truncation error in Microsoft Office Word allows an unauthorized remote attacker to execute code on an affected computer. User interaction is required (CVSS UI:R), so the attack most likely relies on a crafted file delivered by email or document sharing. The CVSS base score is 8.8 (high), with high impact on confidentiality, integrity and availability.

Microsoft · 365 Apps

Microsoft Office Word: Heap-based buffer overflow allows remote code execution

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The attack requires that a user opens a manipulated document, for example one received by email or download. Microsoft rates the flaw as Important with a CVSS score of 8.8, and no public exploit or known exploitation exists.

Microsoft · Office Word

Microsoft Office Word: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The attack requires a user to open a crafted Word document, for example an email attachment or a downloaded file. No internet-exposed service is involved, so phishing is the realistic attack path. CVSS 8.8 (High).

Microsoft · 365 Apps

Microsoft 365 Apps

Research and translation in progress – available shortly.

Microsoft Office Word: Heap-based buffer overflow allows remote code execution

A heap-based buffer overflow in Microsoft Word, part of Microsoft 365 Apps for Enterprise and Office LTSC 2021 and 2024, allows an unauthenticated attacker to execute code over a network. Exploitation requires that a victim opens a crafted Word document or otherwise interacts with it (UI:R). The CVSS base score is 8.8 (High), and the CNA and NVD vector assigns high impact to confidentiality, integrity and availability.

Microsoft · Office Word (365 Apps)

Microsoft Office Excel: Remote code execution via use-after-free

A use-after-free flaw (CWE-416) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. The attack requires that a user opens a crafted spreadsheet or link, so user interaction is needed. Successful exploitation can lead to full compromise of confidentiality, integrity and availability with the privileges of the user running Excel.

Microsoft · 365 Apps