CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62896

Technical details for CVE-2026-62896 are not publicly available in the provided documents; no affected versions, components, or fixes are specified. Monitor for updates from MSRC/NVD.

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62836

CVE-2026-62836 affects Azure SQL Managed Instance. The vulnerability arises from improper restriction of the communication channel to intended endpoints, enabling a network-based elevation of privileges by an unauthenticated attacker. Affected products include Azure SQL Managed Instance (and rela...

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

Copilot Cowork Elevation of Privilege Vulnerability

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network...

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

Microsoft Teams Elevation of Privilege Vulnerability

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

Azure SRE Agent Elevation of Privilege Vulnerability

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...

Azure SQL Database Elevation of Privilege Vulnerability

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

Azure SQL Managed Instance Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

KLA91193 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...

CVE-2026-20288

CVE-2026-20288 affects Cisco IMC’s web-based management interface. An authenticated Admin can exploit improper input validation to execute arbitrary commands on the underlying OS as root, elevating privileges. The Cisco bulletin lists a CVSS v3.1 base score of 6.5 (Medium) with network attack vec...

Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-2010)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2010 advisory. Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits o...

CVE-2026-59913

Affected product/component: Dell Display and Peripheral Manager (DDPM Mac). Vulnerability: Missing Authentication for Critical Function. Affected versions: DDPM Mac prior to 2.3.0.1005. Impact: Local attacker with low privileges could exploit to achieve Elevation of Privileges (privilege escalati...

CVE-2026-59913

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...