Vulnerabilities > Microsoft

DATE CVE VULNERABILITY TITLE RISK
2024-12-12 CVE-2024-49063 Deserialization of Untrusted Data vulnerability in Microsoft Muzic
Microsoft/Muzic Remote Code Execution Vulnerability
local
low complexity
microsoft CWE-502
8.4
2024-12-12 CVE-2024-49064 Unspecified vulnerability in Microsoft Sharepoint Server 2016/2019
Microsoft SharePoint Information Disclosure Vulnerability
network
low complexity
microsoft
6.5
2024-12-12 CVE-2024-49065 Unspecified vulnerability in Microsoft products
Microsoft Office Remote Code Execution Vulnerability
local
low complexity
microsoft
5.5
2024-12-12 CVE-2024-49068 Unspecified vulnerability in Microsoft Sharepoint Server 2016/2019
Microsoft SharePoint Elevation of Privilege Vulnerability
network
low complexity
microsoft
8.2
2024-12-12 CVE-2024-49069 Unspecified vulnerability in Microsoft products
Microsoft Excel Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2024-12-12 CVE-2024-49070 Unspecified vulnerability in Microsoft Sharepoint Server 2016/2019
Microsoft SharePoint Remote Code Execution Vulnerability
local
high complexity
microsoft
7.4
2024-12-12 CVE-2024-49142 Unspecified vulnerability in Microsoft products
Microsoft Access Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2024-11-26 CVE-2024-49035 Unspecified vulnerability in Microsoft Partner Center
An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
network
low complexity
microsoft
critical
9.8
2024-11-26 CVE-2024-49038 Unspecified vulnerability in Microsoft Copilot Studio
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
network
low complexity
microsoft
critical
9.6
2024-11-26 CVE-2024-49052 Unspecified vulnerability in Microsoft Azure Functions
Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network.
network
low complexity
microsoft
critical
9.8