Corrected the CVE description and title. This is an informational change only.

Information published.

Information published.

Information published.

Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network.

Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.

Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privileges over a network.

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.

Improper authorization in Online Services allows an unauthorized attacker to disclose information over a network.