Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.