| Sep 25 | Microsoft Office Outlook: integer overflow High7.5Sep 25 | High7.5 | See the advisory |
| Sep 23 | Microsoft 365 Apps for Enterprise: remote code executionHigh8.8Sep 23 | High8.8 | See the advisory |
| Sep 18 | Microsoft Edge (Chromium-based): use after freeHigh8.1Sep 18 | High8.1 | 153.0.4234.46 |
| Sep 18 | Microsoft Azure HorizonDB: improper authorizationCritical9.9Sep 18 | Critical9.9 | No fix yet |
| Sep 18 | Microsoft 365 Copilot: insecure permissionsHigh7.7Sep 18 | High7.7 | No fix yet |
| Sep 18 | Microsoft Azure Portal: cross-site scriptingHigh8.2Sep 18 | High8.2 | No fix yet |
| Sep 18 | Microsoft Fabric: authentication bypassCritical10.0Sep 18 | Critical10.0 | No fix yet |
| Sep 18 | Microsoft Azure Billing: privilege escalationCritical10.0Sep 18 | Critical10.0 | No fix yet |
| Sep 17 | Microsoft 365 Copilot: command injectionCritical9.9Sep 17 | Critical9.9 | No fix yet |
| Sep 17 | Microsoft Azure AI Foundry: missing authenticationCritical10.0Sep 17 | Critical10.0 | No fix yet |
| Sep 17 | Microsoft Azure AI Foundry: server-side request forgeryHigh7.5Sep 17 | High7.5 | No fix yet |
| Sep 17 | Microsoft Azure Cosmos DB: privilege escalationCritical9.6Sep 17 | Critical9.6 | No fix yet |
| Sep 17 | Microsoft Azure Logic Apps: improper access controlCritical10.0Sep 17 | Critical10.0 | No fix yet |
| Sep 17 | Microsoft 365 Copilot's Business Chat: command injectionHigh7.4Sep 17 | High7.4 | No fix yet |
| Sep 17 | Microsoft Dataverse: authentication bypassCritical9.0Sep 17 | Critical9.0 | No fix yet |
| Sep 17 | Microsoft Azure Logic Apps: path traversalCritical10.0Sep 17 | Critical10.0 | No fix yet |
| Sep 17 | Microsoft Azure ARC: path traversalCritical9.3Sep 17 | Critical9.3 | No fix yet |
| Sep 17 | Microsoft Azure Container Registry: privilege escalationCritical10.0Sep 17 | Critical10.0 | No fix yet |
| Sep 17 | Microsoft Azure ARC: privilege escalationCritical10.0Sep 17 | Critical10.0 | No fix yet |
| Sep 17 | Microsoft Azure Machine Learning: improper authorizationHigh8.6Sep 17 | High8.6 | No fix yet |
| Sep 17 | Microsoft Copilot: command injectionMedium6.1Sep 17 | Medium6.1 | No fix yet |
| Sep 15 | Microsoft Edge (Chromium-based): use after freeHigh8.8Sep 15 | High8.8 | 153.0.4234.32 |
| Sep 15 | Microsoft Edge (Chromium-based): heap buffer overflowHigh8.8Sep 15 | High8.8 | 153.0.4234.32 |
| Sep 14 | Microsoft Windows 11 version 26H1: double freeHigh8.2Sep 14 | High8.2 | 10.0.28000.2956 |
| Sep 14 | Microsoft Edge (Chromium-based): race conditionHigh7.8Sep 14 | High7.8 | 152.0.4191.66 |
| Sep 11 | Microsoft Edge (Chromium-based): cross-site scriptingMedium6.1Sep 11 | Medium6.1 | 151.0.4129.107 |
| Sep 11 | Microsoft Edge: use after freeHigh8.5Sep 11 | High8.5 | 152.0.4191.52+2 more |
| Sep 8 | Microsoft Skype for Business: spoofingHigh8.3Sep 8 | High8.3 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: cross-site scriptingMedium6.5Sep 8 | Medium6.5 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: spoofingHigh7.1Sep 8 | High7.1 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: information disclosureMedium6.5Sep 8 | Medium6.5 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: integer overflowHigh7.5Sep 8 | High7.5 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: out-of-bounds readMedium6.5Sep 8 | Medium6.5 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: cross-site scriptingMedium6.5Sep 8 | Medium6.5 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: remote code executionCritical9.8Sep 8 | Critical9.8 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: null pointer dereferenceMedium6.5Sep 8 | Medium6.5 | 6.0.9319.885+2 more |
| Sep 8 | Microsoft Skype for Business: server-side request forgeryHigh7.5Sep 8 | High7.5 | 6.0.9319.885+2 more |
| Sep 8 | Agent Network Filter Security Feature BypassHigh8.2Sep 8 | High8.2 | 1.136.2 |
| Sep 8 | Agent Network Filter Security Feature BypassHigh8.2Sep 8 | High8.2 | 1.136.2 |
| Sep 8 | Information Disclosure through Automatic Remote Image Fetch in ChatMedium5.3Sep 8 | Medium5.3 | 1.136.2 |
| Sep 8 | Visual Studio Code MCP gallery metadata path traversalMedium6.5Sep 8 | Medium6.5 | 1.136.2 |
| Sep 8 | Azure DevOps access token disclosure through GitHub Copilot Chat workspace settingsMedium6.5Sep 8 | Medium6.5 | 1.136.2 |
| Sep 8 | Visual Studio Code webview resource path containment bypassHigh7.4Sep 8 | High7.4 | 1.136.2 |
| Sep 8 | Remote code execution through workspace-configured remote agent host connectionsHigh8.8Sep 8 | High8.8 | 1.136.2 |
| Sep 8 | Visual Studio Code Workspace Trust bypass through attacker-controlled servicesCritical9.6Sep 8 | Critical9.6 | 1.136.2 |
| Sep 8 | Visual Studio Code Restricted Mode bypass via nested configuration objectsHigh7.8Sep 8 | High7.8 | 1.136.2 |
| Sep 8 | Agent Network Filter Bypass VulnerabilityHigh8.2Sep 8 | High8.2 | 1.136.2 |
| Sep 8 | Microsoft Windows ALPC: heap buffer overflowHigh7.8Sep 8 | High7.8 | 10.0.14393.9512+5 more |
| Sep 8 | Microsoft Office Excel: out-of-bounds readMedium5.5Sep 8 | Medium5.5 | 16.0.20326.20138+5 more |
| Sep 8 | Microsoft Windows 11 Version 24H2: heap buffer overflowHigh8.8Sep 8 | High8.8 | 10.0.26100.9445 |
| Sep 8 | Microsoft Windows Kernel: use after freeHigh7.0Sep 8 | High7.0 | 10.0.14393.9512+9 more |
| Sep 8 | Microsoft Windows Key Distribution Center: out-of-bounds readHigh7.5Sep 8 | High7.5 | 10.0.14393.9512+9 more |
| Sep 8 | Microsoft Authentication Library: authentication bypassHigh7.4Sep 8 | High7.4 | 5.6.0 |
| Sep 8 | Microsoft Windows NTFS: heap buffer overflowHigh7.8Sep 8 | High7.8 | 10.0.14393.9512+9 more |
| Sep 8 | Microsoft Windows Error Reporting: heap buffer overflowHigh8.8Sep 8 | High8.8 | 10.0.14393.9512+9 more |
| Sep 8 | Microsoft Windows Message Queuing: use after freeHigh8.1Sep 8 | High8.1 | 10.0.19044.7725+7 more |
| Sep 8 | Microsoft Remote Desktop Client: heap buffer overflowHigh8.8Sep 8 | High8.8 | 10.0.14393.9512+7 more |
| Sep 8 | Microsoft Windows: privilege escalationHigh7.0Sep 8 | High7.0 | 10.0.26100.9445+3 more |
| Sep 8 | Microsoft Graphics Component: heap buffer overflowHigh7.8Sep 8 | High7.8 | 10.0.14393.9512+9 more |
| Sep 8 | Microsoft Windows Biometric Service: heap buffer overflowHigh7.8Sep 8 | High7.8 | 10.0.14393.9512+7 more |