36426 matches found
EUVD-2026-54325
Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-54315
Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
EUVD-2026-54317
'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
CVE-2026-62873
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-62873
Microsoft 365 Admin Center is affected by CVE-2026-62873 due to improper verification of cryptographic signatures, enabling elevated privileges over a network for an unauthorized attacker. The vulnerability details provided across sources (NVD, ENISA EUVD, CVE listing, and MSRC) confirm the issue...
CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability
...
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
...
CVE-2026-63508 Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
...
CVE-2026-63508
The CVE-2026-63508 entry concerns Microsoft Planetary Computer Pro. It describes a missing authentication vulnerability in a critical function that enables an unauthenticated, network-based attacker to elevate privileges. According to the provided metrics, the CVSSv3.1 base score is 10.0 (CRITICA...
CVE-2026-56162
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56162
CVE-2026-56162 affects Azure SQL Database. The vulnerability stems from improper authentication that enables an unauthenticated, network-based attacker to elevate privileges. The CVSS‑3.1 score is 10.0 (CRITICAL) with vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating network access, low atta...
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
...
CVE-2026-65667
Technical details about CVE-2026-65667 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability
...
CVE-2026-62830
CVE-2026-62830 concerns the Azure SRE Agent, where a missing authorization flaw could allow an authenticated, network-based attacker to elevate privileges. The incident is rated critical (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; base score 9.9). Documents identify the root cause as insuffic...