Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-21264 1 Microsoft 2 Account, Micrososft Account 2026-02-03 9.3 Critical
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21396 1 Microsoft 1 Account 2025-09-09 8.2 High
Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.