What’s Vulnerable › Products
microsoft UFO vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.
Check whether your microsoft UFO version is affected
Latest microsoft UFO vulnerabilities
- CVE-2026-105793 — Microsoft UFO: Authenticated Android shell command injection in Mobile MCP `press_key` (CVSS 9.1)
- CVE-2026-105792 — Microsoft UFO: Authenticated task-result request can deadlock UFO server session manager (CVSS 6.5)
- CVE-2026-105791 — Microsoft UFO: Arbitrary code execution in `run_shell` via `explorer.exe` argument injection (CVSS 7.5)
- CVE-2026-105790 — Microsoft UFO: Authenticated Galaxy device registration can bypass WebSocket SSRF IP pinning via redirects (CVSS 6.4)
- CVE-2026-105789 — Microsoft UFO: Arbitrary file write in the Linux MCP `execute_command` tool (CVSS 5.4)
- CVE-2026-105788 — Microsoft UFO: Authenticated Android shell command injection in Mobile MCP type_text and launch_app (CVSS 8.8)
- CVE-2026-62316 — Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution (CVSS 8.8)
- CVE-2026-73297 — Microsoft UFO: IPv6 transition address bypass of SSRF guard in URL validation (CVSS 6.9)
- CVE-2026-73296 — Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure (CVSS 9.4)
- CVE-2026-55440 — Microsoft UFO: COMMAND_RESULTS handler creates unowned sessions, allowing authenticated session-squatting denial of service (CVSS 6.5)
- CVE-2026-54568 — Microsoft UFO: Missing Authorization in DEVICE_INFO_REQUEST Allows a DEVICE Client to Read Another Device's system_info (CVSS 4.3)
- CVE-2026-46544 — Microsoft UFO reuses client-supplied WebSocket session IDs and replays stale task results to new authenticated requesters (CVSS 5.3)
- CVE-2026-46538 — Microsoft UFO accepts cross-device TASK_END messages by session_id only, allowing peer task-result injection (CVSS 5.9)
- CVE-2026-46416 — Microsoft UFO shared WebSocket handler state causes cross-client response hijacking (CVSS 6.3)
- CVE-2026-46414 — Microsoft UFO WebSocket role spoofing allows authenticated peer task hijacking (CVSS 8.8)
- CVE-2026-46402 — Microsoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directory (CVSS 8.1)
- CVE-2026-45322 — OS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON (CVSS 7.8)