CVE-2026-63522

Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...

CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-70326

CVE-2026-70326 describes a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that enables an authorized attacker to elevate privileges over a network . Publicly documented details indicate the affected product is SharePoint Server, with the underlying impact being el...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-65810 .NET Framework Elevation of Privilege Vulnerability

...

CVE-2026-65810 .NET Framework Elevation of Privilege Vulnerability

...

CVE-2026-65810

CVE-2026-65810 is a .NET Framework relative path traversal vulnerability that enables a local attacker to elevate privileges. Affected software is the .NET Framework; root cause is path traversal in a dotnet component that can be triggered locally, with high impact to confidentiality, integrity, ...

CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65798

CVE-2026-65798 corresponds to a numeric truncation error in Windows DNS that enables an authorized attacker to perform local privilege escalation. Affected component: Windows DNS. Root cause: numeric truncation in DNS handling leading to elevated privileges. Impact is described as local elevation...

CVE-2026-65798 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65797

CVE-2026-65797 involves a numeric truncation error in Windows DNS that can allow an authorized attacker to elevate privileges locally. The available documents confirm the affected component as Windows DNS and the root cause as a numeric truncation flaw. The impact is local privilege escalation wi...

CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65799

CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...

CVE-2026-65795 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65795 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65795

CVE-2026-65795: Windows DNS contains a local elevation of privileges issue. An authorized attacker can elevate privileges locally. CVSS v3.1 reflects LOCAL attack vector, HIGH confidentiality/integrity/availability impact, with HIGH privileges required and no user interaction. Exploitation detail...