Each date says whether the vendor published or updated the bulletin. A vendor bulletin describes products that may be affected. It does not prove that the vulnerable product or version is installed in your environment.
Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a network.
Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an unauthorized attacker to execute code over a network.
Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Affected productsMicrosoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limite...
Affected products.NET 10.0 installed on Windows, .NET 8.0 installed on Windows, .NET 9.0 installed on Windows, Microsoft Visual Studio 2026 version 18.5
Affected productsazl3 clamav 1.5.2-2 on Azure Linux 3.0, azl3 cloud-hypervisor 51.1.56-1 on Azure Linux 3.0, azl3 python-cryptography 42.0.5-4 on Azure Linux 3.0, azl3 rpm-ostree 2024.4-10 on Azure Linux 3.0
We normalize the fields that vendors publish so you can search and compare advisories in one place. We do not replace the original bulletin or turn a product-name match into proof that a system is vulnerable.
Confirm the installed product and version, read the linked vendor guidance, and test the recommended update or mitigation through your normal change process.