Microsoft ASP.NET (April 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by an elevation of privileges vulnerability: - Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-24303

Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-24303

Technical details for CVE-2026-24303 are not publicly available in the provided documents. Monitor for updates from Microsoft and the CVE entry.

CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability

...

CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability

...

CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-26150

The CVE-2026-26150 entry corresponds to a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview eDiscovery that could allow an unauthorized attacker to elevate privileges over a network. The Red Hat, EUVD ENISA, CIRCL, NVD, and MSRC/PTSecurity references corroborate the same descr...

CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability

...

CVE-2026-33102

Technical details of CVE-2026-33102 are not publicly available in the provided documents; monitor for updates from official sources.

CVE-2026-33102

Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability

...

Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege

Executive Summary: A bug in Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages can give an attacker the opportunity to execute an Elevation of Privilege attack by forging authentication cookies, and also allows some protected payloads to be decrypted. If an attacker used forged...

GHSA-9MV3-2CWR-P262 Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege

Executive Summary: A bug in Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages can give an attacker the opportunity to execute an Elevation of Privilege attack by forging authentication cookies, and also allows some protected payloads to be decrypted. If an attacker used forged...

Azure IoT Central Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network...

Microsoft Partner Center Elevation of Privilege Vulnerability

Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

Microsoft 365 Copilot Elevation of Privilege Vulnerability

Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...

Oracle VM VirtualBox Core Component Elevation of Privilege Vulnerability (CNVD-2026-18427)

Oracle VM VirtualBox is a desktop virtualization software developed by Oracle for running multiple operating systems on a single host. An elevation of privilege vulnerability exists in Oracle VM VirtualBox. The vulnerability stems from a failure of the Core component to properly handle privilege...

Oracle VM VirtualBox Core Component Elevation of Privilege Vulnerability (CNVD-2026-18539)

Oracle VM VirtualBox is a desktop virtualization software developed by Oracle to run multiple operating systems on a single host. An elevation of privilege vulnerability exists in Oracle VM VirtualBox. The vulnerability stems from a failure of the Core component to properly handle privilege...