General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-21520 | Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view … | High (7.5) | 2026-01-22 | General Purpose |
| CVE-2026-21264 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an una… | Critical (9.3) | 2026-01-22 | General Purpose |
| CVE-2026-21227 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthoriz… | High (8.2) | 2026-01-22 | General Purpose |
| CVE-2025-67652 | An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privilege… | Medium (6.1) | 2026-01-22 | General Purpose |
| CVE-2025-54816 | This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauth… | Critical (9.4) | 2026-01-22 | General Purpose |