CVE-2026-62873

Microsoft 365 Admin Center is affected by CVE-2026-62873 due to improper verification of cryptographic signatures, enabling elevated privileges over a network for an unauthorized attacker. The vulnerability details provided across sources (NVD, ENISA EUVD, CVE listing, and MSRC) confirm the issue...

CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability

...

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-63508

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

...

CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

...

CVE-2026-63508

The CVE-2026-63508 entry concerns Microsoft Planetary Computer Pro. It describes a missing authentication vulnerability in a critical function that enables an unauthenticated, network-based attacker to elevate privileges. According to the provided metrics, the CVSSv3.1 base score is 10.0 (CRITICA...

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-56162

CVE-2026-56162 affects Azure SQL Database. The vulnerability stems from improper authentication that enables an unauthenticated, network-based attacker to elevate privileges. The CVSS‑3.1 score is 10.0 (CRITICAL) with vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating network access, low atta...

CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-65667

Technical details about CVE-2026-65667 are not publicly available in the provided documents; monitor for updates.

CVE-2026-62830

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability

...

CVE-2026-65667

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62830

CVE-2026-62830 concerns the Azure SRE Agent, where a missing authorization flaw could allow an authenticated, network-based attacker to elevate privileges. The incident is rated critical (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; base score 9.9). Documents identify the root cause as insuffic...

CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability

...

CVE-2026-49163

CVE-2026-49163 concerns an improper limitation of a pathname to a restricted directory (path traversal) in Application Insights Profiler, enabling an authorized attacker to elevate privileges over the network. The entry specifies a CVSSv3.1 base score of 8.8 (High) with Network attack vector, Low...