owa

Jul 26

July Microsoft Patch Tuesday

Alexander Leonov

July Microsoft Patch Tuesday. In the second week of July, I was on vacation in St. Petersburg. After that, I got caught up with a bunch of other tasks, so I'm only publishing this roundup now. Better late than never, especially considering how unusual this MSPT turned out to be. 😉 In total, 571...

discord windows azure microsoft copilot exchange chrome explorer rdp esxi spotify vulnerability rmcast dhcpserver dynamics365 windowsupdate printspooler owa adcs networkdriver azurespringapps adfs aoe2de win32k walletservice rdc tcpip narratorbraille sharepointserver springcloudazureb2c dhcpclient dynamicsnav windowskernel mspt aoe2 hyperv cloudfiles patchtuesday activedirectory sharepoint gdiplus ftpservice vulristics uicore wsus microsoftdynamicsnav sqlserver wac businesscentral adds rmt msmq

Jul 20

July "In the Trend of VM" (#29): Microsoft Exchange Server vulnerability

Alexander Leonov

July "In the Trend of VM" (#29): Microsoft Exchange Server vulnerability. Here is my traditional monthly roundup of trending vulnerabilities, according to Positive Technologies. The previous June edition featured four vulnerabilities. This time, there's only one. 🗞 Post on Habr (rus) 🗒 Digest on...

xss javascript github microsoft exchange outlook vulnerability exploit spoofing kev cisa em positivetechnologies owa esu eomt cisakev trendvulns edge

Jul 02

About Cross Site Scripting - Microsoft Exchange (CVE-2026-42897) vulnerability

Alexander Leonov

About Cross Site Scripting - Microsoft Exchange (CVE-2026-42897) vulnerability. The vulnerability was fixed on May 14 outside the regular Microsoft Patch Tuesday cycle. Improper neutralization of input during web page generation (CWE-79, XSS) in Microsoft Exchange Server allows an unauthorized...

xss javascript github microsoft exchange outlook vulnerability exploit spoofing kev cisa em owa esu eomt cisakev edge