Microsoft
CVE-2023-23397 — Microsoft Outlook NTLM Credential Leak Vulnerability
Technical analysis of CVE-2023-23397, a critical Microsoft Outlook vulnerability that allows attackers to capture NTLM credentials through specially crafted email messages.
CVE-2022-30190 — Follina MSDT Remote Code Execution in Microsoft Office
Technical analysis of CVE-2022-30190 (Follina), a Microsoft Office vulnerability that allows remote code execution by abusing the Microsoft Support Diagnostic Tool (MSDT).
CVE-2021-40444 — MSHTML Remote Code Execution via Malicious Office Documents
Technical analysis of CVE-2021-40444, a Microsoft Office vulnerability exploiting the MSHTML browser engine to execute arbitrary code through malicious documents.
CVE-2021-26855 — ProxyLogon Microsoft Exchange Server SSRF Vulnerability
Technical analysis of CVE-2021-26855 (ProxyLogon), the critical Microsoft Exchange vulnerability that allowed attackers to bypass authentication and compromise Exchange servers.