Microsoft Purview eDiscovery Privilege Escalation

The vulnerability of the Microsoft Purview eDiscovery tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2026-65668

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

CVE-2026-65668: Improper Access Control

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

CVE-2026-65668

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

KLA91190 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

PT-2026-68838

Name of the Vulnerable Software and Affected Versions Microsoft Purview eDiscovery affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version...

CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-26150

The CVE-2026-26150 entry corresponds to a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview eDiscovery that could allow an unauthorized attacker to elevate privileges over a network. The Red Hat, EUVD ENISA, CIRCL, NVD, and MSRC/PTSecurity references corroborate the same descr...

CVE-2025-64676

CVE-2025-64676 concerns Microsoft Purview eDiscovery Remote Code Execution. A flaw in Purview (via the // path) allows an authorized attacker to execute code over the network. Affected software is Microsoft Purview/eDiscovery; the root cause is a path-related/code-execution flaw that can enable t...

CVE-2025-64676 Microsoft Purview eDiscovery Remote Code Execution Vulnerability

...

KLA90826 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Office...