264436 matches found
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-49163
Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...
CVE-2026-50481
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
HPESBNW05119 rev.1 - Multiple Vulnerabilities in HPE Aruba Networking Private 5G Core
Potential Security Impact: Remote: Access Restriction Bypass, Authentication Bypass, Escalation of Privilege, Gain Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Aruba Networking Private 5G Core 1.26.1.2 and prior CVSS Scores: | CVE | CVSS Vector | Base...
Linux Distros Unpatched Vulnerability : CVE-2026-19169
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalatio...
HPESBHF05066 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N | 3.9 |...
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-62873
Microsoft 365 Admin Center is affected by CVE-2026-62873 due to improper verification of cryptographic signatures, enabling elevated privileges over a network for an unauthorized attacker. The vulnerability details provided across sources (NVD, ENISA EUVD, CVE listing, and MSRC) confirm the issue...
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-63508
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
...
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
...
CVE-2026-63508
The CVE-2026-63508 entry concerns Microsoft Planetary Computer Pro. It describes a missing authentication vulnerability in a critical function that enables an unauthenticated, network-based attacker to elevate privileges. According to the provided metrics, the CVSSv3.1 base score is 10.0 (CRITICA...
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56162
CVE-2026-56162 affects Azure SQL Database. The vulnerability stems from improper authentication that enables an unauthenticated, network-based attacker to elevate privileges. The CVSS‑3.1 score is 10.0 (CRITICAL) with vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating network access, low atta...