> CVE-2026-21264 Microsoft Account Spoofing Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 22/01/2026 08:00] [LANGUAGE: EN]

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Account allows an unauthorized attacker to perform spoofing over a network.

[messages.read_original_source] →