ThreatCluster

Multiple Vulnerabilities in Microsoft Products Identified

First seen 12 Nov 2025, 21:25 UTC • •14

Article Content

1 / 56

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

A series of vulnerabilities, collectively identified as CVE-2025, have been reported across various Microsoft products, including Windows, Microsoft Office, and SQL Server. These vulnerabilities allow authorized and unauthorized attackers to elevate privileges, execute code, or disclose sensitive information locally and over networks. Key issues include use after free, improper access control, and buffer overflows.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 230d ago How this analysis works

More articles in this cluster (55)

Threat Graph

15 entities, 22 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Data Breach
Denial of Service
Privilege Escalation
Zero-day Exploit

Affected Platform (9)

Chromium
Microsoft Edge
Microsoft Office
Microsoft Office Excel
Microsoft Wireless Provisioning System
Visual Studio Code
Visual Studio Code Copilot Chat Extension
Windows
Windows Speech

Tool (2)

GitHub Copilot
Google Chrome

Relationships

Data Breach targets Chromium
Data Breach targets Microsoft Edge
Data Breach targets Microsoft Office
Data Breach targets Microsoft Office Excel
Denial of Service targets Chromium
Denial of Service targets Microsoft Edge
Denial of Service targets Microsoft Office
Denial of Service targets Microsoft Office Excel
Privilege Escalation targets Chromium
Privilege Escalation targets Microsoft Edge
Privilege Escalation targets Microsoft Office
Privilege Escalation targets Microsoft Office Excel
Zero-day Exploit targets Chromium
Zero-day Exploit targets Microsoft Edge
Zero-day Exploit targets Microsoft Office
Zero-day Exploit targets Microsoft Office Excel
GitHub Copilot related to Microsoft Wireless Provisioning System
GitHub Copilot related to Visual Studio Code
GitHub Copilot related to Visual Studio Code Copilot Chat Extension
GitHub Copilot related to Windows
GitHub Copilot related to Windows Speech
GitHub Copilot related to Google Chrome

Continue Reading

China-linked Hackers Exploit PHP2Shell to Compromise 25 Firewalls A China-linked threat actor has exploited vulnerabilities in PHP2Shell (CVE-2026-109618, CVE-2026-109619) and the Fragnesia privilege escalation bug (CVE-2026-46300) to gain root access to 25 firewalls, including those in an U.S. The attackers identified vulnerable systems using the FOFA search engine and executed…

Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…