Microsoft Account vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Account: 2 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:account

CVE-2026-56165 Critical · 9.8 CWE-122 Jul 23, 2026

Microsoft Account Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.

CVE-2026-21264 Medium · 6.1 CWE-79 Jan 22, 2026

Microsoft Account Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.