37296 matches found
CVE-2026-26118
CVE-2026-26118 – Azure MCP Server Tools SSRF allows an authorized attacker to elevate privileges. Affected component: MCP Server Tools. Root cause: server-side request forgery enabling elevation of privilege with network access. CVSSv3.1 base score 8.8 (High); Vector: Network; Privileges required...
CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability
...
CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability
...
CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-26117
CVE-2026-26117 concerns Arc Enabled Servers running the Azure Connected Machine Agent. The vulnerability is an Elevation of Privilege issue affecting the Azure Arc-enabled machine agent on Arc-enabled servers. According to the CVSS data, it is a local, low-complexity attack requiring LOW privileg...
CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-23665 Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability
...
CVE-2026-23665
Technical details and affected product/version are not provided in the supplied documents; monitor for updates from official sources.
CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability
...
CVE-2026-26148
The CVE-2026-26148 issue affects the Microsoft Azure AD SSH Login extension for Linux, causing elevation of privilege. According to the provided metrics, the vulnerability is a LOCAL, high-severity flaw (CVSS 3.1: 8.1) with no required user interaction and no privileges required. The attack compl...
CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability
...
CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability
...
CVE-2026-26134
CVE-2026-26134 is an elevation-of-privilege vulnerability in Microsoft Office resulting from an integer overflow/wraparound in Office components, allowing an authenticated local attacker to elevate privileges. Public sources in the connected documents confirm the impact as local privilege escalat...
CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability
...
CVE-2026-26131 .NET Elevation of Privilege Vulnerability
...
CVE-2026-26131 .NET Elevation of Privilege Vulnerability
...
CVE-2026-26132
CVE-2026-26132 is a Windows Kernel elevation-of-privilege vulnerability with a 7.8 CVSS score (3.1). Attack vector is LOCAL, complexity LOW, privileges required LOW, user interaction NONE, and scope UNCHANGED; impact is HIGH on confidentiality, integrity, and availability. Exploitation status: UN...
CVE-2026-26131
CVE-2026-26131 is a .NET Elevation of Privilege vulnerability with CVSS v3.1 base score 7.8 (HIGH). The entry indicates a LOCAL attacker with LOW privileges can exploit it without user interaction, potentially affecting confidentiality, integrity, and availability (all HIGH), under an UNCHANGED s...