Microsoft Microsoft Account
3 CVEs affecting Microsoft Microsoft Account. Latest disclosed: 2026-07-24. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-56165 | Critical | 9.8 | 2026-07-24 | Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network. |
CVE-2026-21264 | Critical | 9.3 | 2026-01-22 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing o… |
CVE-2025-21396 | High | 8.2 | 2025-01-29 | Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network. |