Microsoft Account
Monthly
Remote code execution in Microsoft Account arises from a heap-based buffer overflow that an unauthorized, network-based attacker can trigger without authentication or user interaction, per the CVSS:3.1 vector (AV:N/PR:N/UI:N). The CVSS temporal data indicates exploit maturity is Unproven (E:U), so no public exploit identified at time of analysis and the issue is not on CISA KEV; however, an official vendor fix (RL:O) with Confirmed report confidence (RC:C) is already available. Given the 9.8 base score and full confidentiality/integrity/availability impact, this warrants priority remediation despite the current absence of exploit code.
Remote code execution in Microsoft Account arises from a heap-based buffer overflow that an unauthorized, network-based attacker can trigger without authentication or user interaction, per the CVSS:3.1 vector (AV:N/PR:N/UI:N). The CVSS temporal data indicates exploit maturity is Unproven (E:U), so no public exploit identified at time of analysis and the issue is not on CISA KEV; however, an official vendor fix (RL:O) with Confirmed report confidence (RC:C) is already available. Given the 9.8 base score and full confidentiality/integrity/availability impact, this warrants priority remediation despite the current absence of exploit code.