Microsoft Account
2 CVEs affecting Microsoft Account. Latest disclosed: 2026-01-22. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-21264 | Critical | 9.3 | 2026-01-22 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing o… |
CVE-2025-21396 | High | 8.2 | 2025-01-29 | Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network. |