https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:08:31 +0000 https://cve.radiocsirt.org/vuln/cve-2019-1172 <p><strong>Affected:</strong> Microsoft Windows 10 Version 1703, Microsoft Windows 10 Version 1803, Microsoft Windows Server, version 1803 (Server Core Installation), Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1709 for 32-bit Systems, Microsoft Windows 10 Version 1709, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems and 9 more</p> <p>An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session. An attacker who successfully exploited the vulnerability could take over a user&#39;s account. To exploit the vulnerability, an attacker would have to trick a user into browsing to a specially crafted website, allowing the attacker to steal the user&#39;s token. The security update addresses the vulnerability by correcting how MSA handles cookies.</p> <p><strong>Affected:</strong> Microsoft Windows 10 Version 1703, Microsoft Windows 10 Version 1803, Microsoft Windows Server, version 1803 (Server Core Installation), Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows 10 Version 1709 for 32-bit Systems, Microsoft Windows 10 Version 1709, Microsoft Windows 10 Version 1903 for 32-bit Systems, Microsoft Windows 10 Version 1903 for x64-based Systems and 9 more</p> <p>An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login request session. An attacker who successfully exploited the vulnerability could take over a user&#39;s account. To exploit the vulnerability, an attacker would have to trick a user into browsing to a specially crafted website, allowing the attacker to steal the user&#39;s token. The security update addresses the vulnerability by correcting how MSA handles cookies.</p> https://cve.radiocsirt.org/vuln/cve-2019-1172