Skip to content
OpenAdvisories

Product · Microsoft

Microsoft Account

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56165

    Microsoft Account Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

    Microsoft Microsoft Account
  • Critical 9.3
    CVE-2026-21264

    Microsoft Account Spoofing Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.

    Microsoft Microsoft Account