Microsoft - CVE CyberSecurity Database News (Page 29)

Feb 25, 2025 Microsoft PHP

CVE-2025-23046 - How a Vulnerability in GLPI’s OauthIMAP Plugin Can Let Attackers Sneak Into Your IT Management System

GLPI is a popular open-source IT asset and service management tool that’s especially favored by sysadmins in businesses and schools. Security is key for

Feb 20, 2025 RCE Windows Microsoft API Exploit

CVE-2025-27218 - Critical Remote Code Execution in Sitecore XM/XP 10.4 via Insecure Deserialization

Sitecore is a popular enterprise-grade content management system used by organizations worldwide. In March 2025, a serious vulnerability was identified in Sitecore Experience Manager (XM)

Feb 19, 2025 Microsoft Exploit

CVE-2025-24989 - Power Pages Improper Access Control Flaw Explained, With Exploit Details

In early 2025, security researchers found an improper access control vulnerability in Microsoft's Power Pages platform, tracked as CVE-2025-24989. This issue allowed unauthorized

Feb 19, 2025 Windows Microsoft API Exploit

CVE-2025-21355 - How Missing Authentication in Microsoft Bing Puts Your Network at Risk

--- In June 2025, security researchers discovered a severe vulnerability in Microsoft Bing, tracked as CVE-2025-21355. This issue centers around missing authentication in a critical

Feb 15, 2025 Microsoft API Exploit

CVE-2025-21401 - Breaking Down the Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

--- Introduction In early 2025, CVE-2025-21401 emerged as a high-profile security issue affecting Microsoft Edge (Chromium-based). This CVE highlights a security feature bypass vulnerability that