Microsoft | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Layer 2 network security bypass using VLAN 0, LLC/SNAP headers and invalid length	Layer 2 Networking Vulnerability Ethernet MiTM DoS	Microsoft Cisco	Etienne Champetier / Champtar
Skype for Business Audit Part 2 - SKYPErimeterleak	SSRF Security Code Review	Microsoft	Florian Hauser (@Frycos)
New Attack Paths? AS Requested Service Tickets	Local Privilege Escalation Windows Kerberos Active Directory	Microsoft	Charlie Clark (@Exploitph)
Microsoft Windows Shift F10 Bypass and Autopilot privilge escalation	Local Privilege Escalation	Microsoft	Matek Kamilló (@K4m1ll0)
Skype for Business Audit Part 1 - SKYPErsistence	Local Privilege Escalation Windows Security Code Review	Microsoft	Florian Hauser (@Frycos)
How an Akamai misconfiguration earned us USD 46.000	HTTP Request Smuggling	Akamai Microsoft Apple	Francesco Mariani (@_Medusa_1_) Jacopo Tediosi (@Jacopotediosi)
Undermining Microsoft Teams Security by Mining Tokens	Insecure Storage of Sensitive Information	Microsoft	Vectra Protect Team (@Vectra_AI)
New technique 403 bypass lyncdiscover.microsoft.com	403 Bypass	Microsoft	Abbas Heybati (@Abbas_heybati)
CVE-2022-34715: More Microsoft Windows NFS V4 Remote Code Execution	RCE Memory Corruption	Microsoft	Quintin Crist Dusan Stevanovic Arimura
Quasar: Compromising Electron Apps	Local Privilege Escalation	Microsoft	Taggart (@Mttaggart)
Azure Synapse: Local Privilege Escalation Vulnerability in Spark	Race Condition Local Privilege Escalation Cloud	Microsoft	Tzah Pahima (@TzahPahima)
“GIFShell” — Covert Attack Chain and C2 Utilizing Microsoft Teams GIFs	Phishing	Microsoft	Bobby Rauch
Break Me Out Of Sandbox In Old Pipe - CVE-2022-22715 Windows Dirty Pipe	Local Privilege Escalation	Microsoft	K0shl (@KeyZ3r0)
Securing Developer Tools: Argument Injection in Visual Studio Code	Argument Injection RCE	Microsoft	Thomas Chauchefoin (@Swapgs)
Let's Dance in the Cache - Destabilizing Hash Table on Microsoft IIS!	DoS Web Cache Poisoning Authentication Bypass	Microsoft	Orange Tsai (@Orange_8361)
Outlook CVE-2022-35742	DoS	Microsoft	Insu (@Hpy_insu)
You Have One New Appwntment: Exploiting iCalendar Properties in Enterprise Applications	XSS SMTP Injection	VMware Synology Apple Microsoft Google NextCloud	Eugene Lim (@Spaceraccoonsec)
CVE-2022-30211: Windows L2TP VPN Memory Leak and Use after Free Vulnerability	Memory Corruption RCE	Microsoft	Alex Nichols (@I4mchr00t)
CVE-2022-30216 - Authentication coercion of the Windows “Server” service	Off-by-One Error Authentication Coercion	Microsoft	Ben Barnea (@Nachoskrnl)
The cloud has an isolation problem: PostgreSQL vulnerabilities affect multiple cloud vendors	Privilege Escalation Cross-Tenant Vulnerability OS Command Injection Local Privilege Escalation Cloud	Google Microsoft Aiven	Shir Tamari (@Shirtamari) Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_)
Revisiting OMI: Analysis of CVE-2022-29149, a privilege escalation vulnerability in Azure OMI	Local Privilege Escalation Cloud	Microsoft	Nir Ohfeld (@Nirohfeld) Rotem Lipowitch (@Rotemlipowitch)
Reading Message from Microsoft’s Private Yammer Group	Broken Authorization	Microsoft	Meareg
Deep understand ASPX file handling and some related attack vectors	Local Privilege Escalation WAF Bypass	Microsoft	Rskvp93 (@Rskvp93)
Logging Passwords in Plaintext in Azure Arc	Information Disclosure Local Privilege Escalation Cloud	Microsoft	Jimi Sebree (@DinoBytes)
SSD Advisory – Microsoft SharePoint Server WizardConnectToDataStep4 Deserialization Of Untrusted Data RCE	Insecure Deserialization RCE	Microsoft	Alex Birnberg (@Alexbirnberg)

Page 4 of 13