Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
|
Description: Microsoft says it partially mitigated a week-long Exchange Online outage causing delays or failures when sending or receiving email messages. [...]
March 14th, 2025 (about 1 month ago)
|
CVE-2025-1888 |
Description: The Leica Web Viewer within the Aperio Eslide Manager Application is vulnerable to reflected cross-site scripting (XSS). An authenticated user can access the slides within a project and injecting malicious JavaScript into the "memo" field. The memo field has a hover over action that will display a Microsoft Tool Tip which a user can use to quickly view the memo associated with the slide and execute the JavaScript.
CVSS: MEDIUM (4.6) EPSS Score: 0.03%
March 14th, 2025 (about 1 month ago)
|
|
CVE-2024-48938 |
Description: Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.
EPSS Score: 0.25% SSVC Exploitation: none
March 14th, 2025 (about 1 month ago)
|
|
Description: Microsoft has reinstated the 'Material Theme - Free' and 'Material Theme Icons - Free' extensions on the Visual Studio Marketplace after finding that the obfuscated code they contained wasn't actually malicious. [...]
March 13th, 2025 (about 1 month ago)
|
|
Description: Microsoft is now testing an AI-powered text summarization feature in Notepad and a Snipping Tool "Draw & Hold" feature that helps draw perfect shapes. [...]
March 13th, 2025 (about 1 month ago)
|
|
CVE-2025-24053 |
Description: Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
CVSS: HIGH (7.2) EPSS Score: 0.13%
March 13th, 2025 (about 1 month ago)
|
|
Description: Microsoft is investigating a known issue that causes the new Outlook email client to crash when users click the "Go to classic Outlook" button, which should help them switch back to the classic Outlook. [...]
March 13th, 2025 (about 1 month ago)
|
|
Description: Microsoft has shed light on an ongoing phishing campaign that targeted the hospitality sector by impersonating online travel agency Booking.com using an increasingly popular social engineering technique called ClickFix to deliver credential-stealing malware.
The activity, the tech giant said, started in December 2024 and operates with the end goal of conducting financial fraud and theft. It's
March 13th, 2025 (about 1 month ago)
|
|
Description: Microsoft is warning that an ongoing phishing campaign impersonating Booking.com is using ClickFix social engineering attacks to infect hospitality workers with various malware, including infostealers and RATs. [...]
March 13th, 2025 (about 1 month ago)
|
|
Description: Slovak cybersecurity company ESET says a newly patched zero-day vulnerability in the Windows Win32 Kernel Subsystem has been exploited in attacks since March 2023. [...]
March 12th, 2025 (about 1 month ago)
|