CVE-2026-54424

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Parsec through v2026-05-04.0. The patched version is Parsec for Windows version 150-104a. A user can generate a situation where there is an instance o...

CVE-2026-54998 Microsoft Exchange Online Elevation of Privilege Vulnerability

...

CVE-2026-54998 Microsoft Exchange Online Elevation of Privilege Vulnerability

...

CVE-2026-54998

CVE-2026-54998 describes an incorrect authorization in Microsoft Exchange Online that enables an authorized attacker to elevate privileges over a network. This vulnerability impacts Exchange Online’s authorization checks, allowing escalation of access from an existing authorized state. The CVSS 3...

CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability

...

CVE-2026-41106

Technical details for CVE-2026-41106 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.

CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability

...

CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability

...

CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability

...

CVE-2026-45499

Server-side request forgery ssrf in Azure OpenAI allows an authorized attacker to elevate privileges over a network...

CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

CVE-2026-45499

Technical details for CVE-2026-45499 are not publicly available in the provided documents. Monitor for updates; current sources only reiterate the SSRF elevation in Azure OpenAI without specification of affected products, versions, or fixes.

CVE-2026-26145

CVE-2026-26145 concerns Microsoft Azure Synapse with an elevation-of-privilege flaw caused by improper access control. Affected software is Azure Synapse; the core issue is inadequate access controls that permit an authorized attacker to elevate privileges over a network. The public-facing materi...

CVE-2026-57100

Technical details on affected products/versions, root cause, exploit scenarios, or mitigations are not publicly provided in the supplied documents. Monitor official sources for updates.

CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

...

CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

...

Azure OpenAI Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure OpenAI allows an authorized attacker to elevate privileges over a network...

Microsoft Azure Synapse Elevation of Privilege Vulnerability

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...