CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

...

CVE-2026-59115

Microsoft Entra Provisioning Service (SyncFabric) is affected by CVE-2026-59115, described as a privilege-escalation vulnerability enabling an authorized attacker to elevate privileges over the network. Available sources list a CVSS v3.1 base score of 9.9 (Network, Privilege Required: Low, User I...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481

CVE-2026-50481 affects Azure Active Directory, where modification of assumed-immutable data (maid) enables an authorized attacker to elevate privileges over a network. The CVSS data indicates NETWORK attack vector, LOW access complexity, LOW privileges required, and HIGH confidentiality/integrity...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-59118 Microsoft Power Apps Elevation of Privilege Vulnerability

...

CVE-2026-59118 Microsoft Power Apps Elevation of Privilege Vulnerability

...

CVE-2026-59118

Technical details such as affected components, root cause, and patch information are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other sources.

CVE-2026-65668

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-65668

Technical details about CVE-2026-65668 (affected product/versions, root cause, impact) are not publicly provided in the supplied documents. Monitor for updates from the referenced sources (MSRC, NVD, EUVD, CVE.org).

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62896

Technical details for CVE-2026-62896 are not publicly available in the provided documents; no affected versions, components, or fixes are specified. Monitor for updates from MSRC/NVD.

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62836

CVE-2026-62836 affects Azure SQL Managed Instance. The vulnerability arises from improper restriction of the communication channel to intended endpoints, enabling a network-based elevation of privileges by an unauthenticated attacker. Affected products include Azure SQL Managed Instance (and rela...