Microsoft Account vulnerabilities
2 known vulnerabilities affecting microsoft/microsoft_account.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2025-21396P2CRITICALCVSS 9.8v-2025-01-29
CVE-2025-21396 [CRITICAL] CWE-862 CVE-2025-21396: Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges ove
Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-21264P4MEDIUMCVSS 6.1v-2026-01-22
CVE-2026-21264 [MEDIUM] CWE-79 CVE-2026-21264: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ac
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.
nvd