Microsoft Account vulnerabilities
3 known vulnerabilities affecting microsoft/microsoft_account.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-56165P2CRITICALCVSS 9.8v-2026-07-24
CVE-2026-56165 [CRITICAL] CWE-122 CVE-2026-56165: Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21396P3CRITICALCVSS 9.8v-2025-01-29
CVE-2025-21396 [CRITICAL] CWE-862 CVE-2025-21396: Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges ove
Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-21264P4MEDIUMCVSS 6.1v-2026-01-22
CVE-2026-21264 [MEDIUM] CWE-79 CVE-2026-21264: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ac
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.
nvd