Microsoft | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Uncovering a Bug I Found in Outlook: How Could an Account Has Been Compromised?	XSS	Microsoft	Cem Onat Karagun
Microsoft bug reports lead to ranking on Microsoft MSRC Quarterly Leaderboard (Q3 2022)	XSS	Microsoft	Supakiad S. (@Supakiad_Mee)
Passwordless Persistence and Privilege Escalation in Azure	Privilege Escalation Cloud Azure AD	Microsoft	Andy Robbins (@_Wald0)
You’ve Crossed the Line — Disturbing a Host’s Rest	Windows MS-RPC DoS	Microsoft	Ben Barnea (@Nachoskrnl)
SysmonEoP	Local Privilege Escalation Windows	Microsoft	Filip Dragovic (@Filip_dragovic)
CertPotato – Using ADCS to privesc from virtual and network service accounts to local system	Local Privilege Escalation ADCS	Microsoft	Hocine Mahtout (@Sant0rryu)
SyncJacking: Hard Matching Vulnerability Enables Azure AD Account Takeover	Account Takeover Azure AD Cloud	Microsoft	Tomer Nahum (@TomerNahum1)
Every Signature is Broken: On the Insecurity of Microsoft Office’s OOXML Signatures	Signature Bypass Signature Forgery Cryptographic Issues Windows	Microsoft	Simon Rohlmann Vladislav Mladenov Christian Mainka Daniel Hirschberger Jörg Schwenk
Security and Privacy Failures in Popular 2FA Apps	Cryptographic Issues	LastPass Google Twilio Microsoft Duo Salesforce Latch Zoho	Conor Gilsenan Fuzail Shakir Noura Alomar Serge Egelman
Windows Kernel: Exploit CVE-2022-35803 in Common Log File System	Windows Local Privilege Escalation Type Confusion	Microsoft	Luckyu (@Uuulucky)
Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049)	Local Privilege Escalation Windows	Microsoft	Kuba Gretzky (@Mrgretzky)
Blind SSRF in Skype (Microsoft)	Blind SSRF	Microsoft	Jayateertha Guruprasad (@JayateerthaG)
Technical Analysis of Windows CLFS Zero-Day Vulnerability CVE-2022-37969 - Part 1: Root Cause Analysis	Local Privilege Escalation Windows	Microsoft	Zscaler Threatlabz (@Threatlabz)
Visual Studio Code Jupyter Notebook RCE	RCE XSS Arbitrary File Read Electron	Microsoft	Luca Carettoni (@Lucacarettoni)
Microsoft SharePoint Server Post-Authentication Server-Side Request Forgery vulnerability	SSRF	Microsoft	Li JianTao (@Cursered)
The Logging Dead: Two Event Log Vulnerabilities Haunting Windows	DoS	Microsoft	Dolev Taler
A New Attack Surface on MS Exchange Part 4 - ProxyRelay!	RCE Privilege Escalation	Microsoft	Orange Tsai (@Orange_8361)
FabriXss (CVE-2022-35829): How We Managed to Abuse a Custom Role User Using CSTI and Stored XSS in Azure Fabric Explorer	CSTI Stored XSS	Microsoft	Lidor Ben Shitrit
Microsoft Office Online Server Remote Code Execution	SSRF RCE	Microsoft	Manish Tanwar (@IndiShell1046)
Guest Blog Post - Memory corruption vulnerabilities in Edge	Browser Hacking Memory Corruption Use-After-Free Out-of-Bounds Read Out-of-Bounds Write	Microsoft	David Erceg (@David_erceg)
Microsoft Office 365 Message Encryption Insecure Mode of Operation	Weak Crypto	Microsoft	Harry Sintonen
$6000 with Microsoft Hall of Fame \| Microsoft Firewall Bypass \| CRLF to XSS \| Microsoft Bug Bounty	CRLF Injection XSS	Microsoft	Neh Patel (@Thecyberneh)
Cold Hard Cache — Bypassing RPC Interface Security with Cache Abuse	Privilege Escalation Windows	Microsoft	-
Insecure Comments	IDOR Broken Authorization	Microsoft	Meareg
Worldwide Server-side Cache Poisoning on All Akamai Edge Nodes ($50K+ Bounty Earned)	Web Cache Poisoning	Akamai Paypal Airbnb Tesla Valve Zomato Whitejar Starbucks PlayStation Marriott Hyatt Hotels Goldman Sachs Microsoft Apple LastPass Brussels Airlines Mastercard EToro BBP BMW Group Rockstar Games	Francesco Mariani (@_Medusa_1_) Jacopo Tediosi (@Jacopotediosi)

Page 3 of 13