CVE-2026-68782

An SQL injection flaw in Azure SQL Database allows an authenticated, low-privilege network attacker to elevate privileges, with CVSS 9.9 (Critical) reflecting full confidentiality, integrity, and availability impact. Microsoft's update guide is the primary remediation reference; no patch version ...

CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-66309

CVE-2026-66309 is a Critical (CVSS 9.1) elevation-of-privilege flaw in Azure SQL Database; an authenticated, high-privilege attacker can escalate privileges over the network, affecting confidentiality, integrity, and availability. No affected versions, root cause, or patch details are provided in...

CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-65816

Azure Arc (Microsoft) is affected by an elevation of privilege vulnerability caused by the use of an incorrectly-resolved name or reference. An unauthorized, unauthenticated attacker can exploit this over the network to gain elevated privileges, with high impact on confidentiality, integrity, and...

CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-63509

A critical (CVSS 9.9) relative path traversal vulnerability in Microsoft Fabric allows an authenticated, low-privileged attacker over the network to elevate privileges, impacting confidentiality, integrity, and availability. No affected versions, exploit details, or patch information are provided...

CVE-2026-63509 Microsoft Fabric Elevation of Privilege Vulnerability

...

CVE-2026-16989

CVE-2026-16989 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 , where improper resolution of symbolic links allows a local attacker with low privileges to gain elevated privileges (high impact on confidentiality and integrity, no availability impact). The CVSS 3.1 score is 7.1 (HIGH) with a lo...

CVE-2026-16989 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links...

CVE-2026-16951

A heap-based buffer overflow in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 allows a local authenticated attacker to execute arbitrary code. CVSS 6.7 (MEDIUM) reflects the high privileges required. No exploit or patch details are provided in the documents. The IBM support page (linked in references) sho...

CVE-2026-16951 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...

CVE-2026-69851

An SSRF vulnerability in Microsoft Entra ID (Azure Active Directory) allows an authorized attacker to elevate privileges over a network. CVSS 9.9 (critical) reflects network access, low complexity, and full confidentiality/integrity/availability impact. Exploitation status and patch details are n...

CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68789

CVE-2026-68789 is a SQL injection vulnerability in Azure SQL Database that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 9.9 (CRITICAL) with a scope change, indicating high impact on confidentiality, integrity, and availability. CISA's SSVC as...

CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability

...

CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability

...

CVE-2026-65801

CVE-2026-65801 is a critical (CVSS 3.1: 10.0) server-side request forgery (SSRF) vulnerability in Microsoft Exchange Online that allows an unauthorized, unauthenticated attacker to elevate privileges over a network . The attack requires no user interaction, no prior privileges, and has low comple...