CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-59118 Microsoft Power Apps Elevation of Privilege Vulnerability

...

CVE-2026-59118 Microsoft Power Apps Elevation of Privilege Vulnerability

...

CVE-2026-59118

Technical details such as affected components, root cause, and patch information are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other sources.

CVE-2026-65668

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-65668

Technical details about CVE-2026-65668 (affected product/versions, root cause, impact) are not publicly provided in the supplied documents. Monitor for updates from the referenced sources (MSRC, NVD, EUVD, CVE.org).

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62896

Technical details for CVE-2026-62896 are not publicly available in the provided documents; no affected versions, components, or fixes are specified. Monitor for updates from MSRC/NVD.

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

CVE-2026-62836

CVE-2026-62836 affects Azure SQL Managed Instance. The vulnerability arises from improper restriction of the communication channel to intended endpoints, enabling a network-based elevation of privileges by an unauthenticated attacker. Affected products include Azure SQL Managed Instance (and rela...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-7867

A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option in the org.freedesktop.UDisks2.Filesystem.Mount D-Bus method. This allows the attacker to spoof the 'as-user' parameter, mounting filesystems on...

CVE-2026-67687

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-19169

Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-19139

Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...