Skip to content

Known vulnerabilities in Microsoft Account

Is your version affected?

CVE Summary Score Published
CVE-2026-56165 Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 23, 2026
CVE-2026-21264 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an… 9.3 Critical Jan 22, 2026
CVE-2025-21396 Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network 8.2 High Jan 29, 2025

Other Microsoft products