Microsoft | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Hijacking Someone Else’s DCSync	Post-Exploitation Active Directory Azure AD Cloud	Microsoft	Anthony Larcher-Gore (@Nullg0re)
Cross-Tenant Information Disclosure: Unraveling Microsoft Connections, Custom Connectors, and OAuth 2.0 in Power Automate	OAuth Cross-Tenant Vulnerability	Microsoft	Firas Fatnassi (@Fatnass1F1ras)
Security Feature Bypass In ASP.NET and Visual Studio – Race Condition	Race Condition Bruteforce	Microsoft	Jack Moran TC Ethan McKee-Harris
Story of Clickjacking on Microsoft Leads To Privilege Escalation & Account Takeover Of Admin	Clickjacking Privilege Escalation Account Takeover	Microsoft	Abdul Rehman Parkar
AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice	SQL Injection WAF Bypass	Microsoft AWS	Marc Olivier Bergeron
Send email from anyone to any(user outlook Microsoft)	Open Mail Relay Email Spoofing SMTP SPF Bypass	Microsoft	Abbas Heybati (@Abbas_heybati)
Size matters! When capital letters introduce vulnerabilities	XSS	Microsoft	Mario Stathakopoulos Pieter Van Schaik
Never Connect to RDP Servers Over Untrusted Networks	RDP	Microsoft	Olivier Bilodeau (@Obilodeau)
2 XSS on Microsoft	XSS	Microsoft	Mohammad Nikouei (@NikoueiMohammad)
How to avoid the aCropalypse	Privacy Issue Information Disclosure Android	Google Microsoft	Henrik Brodin
Anatomy of a Reflected XSS: My Discovery on a Microsoft’s Subdomain	Reflected XSS	Microsoft	Sawrav Chowdhury
Microsoft Defender for Cloud Management Port Exposure Confusion	Cloud Security Misconfiguration	Microsoft	Aaron Sawitsky
Vulnerabilities in the TPM 2.0 reference implementation code	Memory Corruption Out-of-Bounds Read Out-of-Bounds Write	Microsoft VMware Google IBM Lenovo Qemu Nuvoton Trusted Computing Group STMicroelectronics Aruba Networks CERT/CC Libtpms	Francisco Falcon (@Fdfalcon)
Feeding Tasty Objects to Visual Studio's App Center SDK for Apple	Insecure Deserialization MacOS	Microsoft	Jenny (@OldM4nHunting)
Escaping well-configured VSCode extensions (for profit)	Electron Webview Path Traversal	Microsoft	Vasco Franco
How I found DOM-Based XSS on Microsoft MSRC and How they fixed it	DOM XSS	Microsoft	Supakiad S. (@Supakiad_Mee)
Information Disclosure Vulnerability in Adobe Experience Manager affecting multiple companies including Microsoft, Apple, Amazon, McDonald’s and many more.	Information Disclosure AEM	Apple Microsoft Amazon McDonalds	Fat Selimi (@Fattselimi)
LocalPotato - When Swapping The Context Leads You To SYSTEM	Windows NTLM Local Privilege Escalation	Microsoft	Andrea Pierini (@Decoder_it)
Can't Wait to Shut You Down — Remote DoS Using Wininit.exe	DoS MS-RPC Windows	Microsoft	Stiv Kupchik (@Kupsul)
Exploiting a Critical Spoofing Vulnerability in Windows CryptoAPI	Windows Cryptographic Issues	Microsoft	Tomer Peled (@Tomerpeled92) Yoni Rozenshein
Activation Context Cache Poisoning: Exploiting CSRSS For Privilege Escalation	Local Privilege Escalation Windows	Microsoft	Simon Zuckerbraun
Reflected XSS Leads to 3,000$ Bug Bounty Rewards from Microsoft Forms	Reflected XSS	Microsoft	Supakiad S. (@Supakiad_Mee)
2022 Microsoft Teams RCE	RCE Insecure Deeplink Webview	Microsoft	@Adm1nkyj1 @Jinmo123
Stored XSS vulnerability in Microsoft booking	Stored XSS CSP Bypass	Microsoft	Mrtechghost
The OWASSRF + TabShell exploit chain	SSRF Path Traversal Sandbox Escape	Microsoft	Rskvp93 (@Rskvp93) Q5Ca (@_Q5ca) Nxhoang99 (@Nxhoang99)

Page 2 of 13