microsoft simplechat vulnerabilities
4 published CVEs name microsoft simplechat among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-105798
SimpleChat: Stored XSS via group document filename in inline onclick handler
microsoft · simplechat
High8.7 - CVE-2026-105797
SimpleChat: Command injection via authorization-gate ordering flaw (arbitrary process spawn through MCP stdio transport)
microsoft · simplechat
High8.8 - CVE-2026-57206
SimpleChat plugin validation endpoints missing authentication and authorization
microsoft · simplechat
High8.6 - CVE-2026-57205
SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints
microsoft · simplechat
Medium4.3