CVE-2026-56167

Technical details about CVE-2026-56167 are not publicly provided in the connected documents. Monitor for updates from Microsoft/MSRC and CVE databases for affected products, vulnerable components, versions, and remediation.

CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability

...

CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability

...

Data Quality Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Data Quality allows an unauthorized attacker to elevate privileges over a network...

Azure AI Search Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network...

Azure Key Vault Elevation of Privilege Vulnerability

Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network...

Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...

Azure DNS Elevation of Privilege Vulnerability

Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network...

Exploit for CVE-2026-66804

CVE-2026-66804: Microsoft Windows Cross Device Service Elevati...

KLA91177 PE vulnerabilities in Microsoft Office

Privilege escalation vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure DNS can be exploited remotely to gain privileges. 2. An...

CVE-2026-49499

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-47734

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-49499

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-46738

Dell PowerProtect Data Manager is affected (versions prior to 20.2.0.0). The issue is an Improper Input Validation in the REST API that can be triggered over the network. A highly privileged attacker with remote access could exploit this to achieve an Elevation of Privileges . The available docum...

CVE-2026-40712

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

EUVD-2026-47730

Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2026-63428

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 20.2.0.0 Description An improper input validation issue exists within the REST API. A high privileged attacker with remote access could exploit this flaw to achieve elevation of privileges...

CVE-2026-47405

CVE-2026-47405 covers PraisonAI Platform where a broken workspace authorization check uses require_workspace_member with default min_role="member", enabling any authenticated low‑privilege workspace member to self‑promote to owner and alter workspace membership. Connected docs confirm this affect...