37367 matches found
CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
...
CVE-2026-23660
CVE-2026-23660 concerns Windows Admin Center in the Azure Portal with an Elevation of Privilege vulnerability. Attack vector is local, requiring LOW privileges with no user interaction, and the impact is HIGH on confidentiality, integrity, and availability. The base score is 7.8 (CVSS 3.1). The e...
CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
...
CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-21262
CVE-2026-21262 affects Microsoft SQL Server and is a privilege-escalation vulnerability caused by improper access control. An authorized, network-present attacker with low privileges can elevate to sysadmin, potentially reading/changing data, creating accounts, or altering configurations, as desc...
Windows SMB Server Elevation of Privilege Vulnerability
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...
Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
KB5077469 - Description of the security update for SQL Server 2019 CU32: March 10, 2026
None None...
KB5077465 - Description of the security update for SQL Server 2022 GDR: March 10, 2026
None None...
KB5077466 - Description of the security update for SQL Server 2025 CU2: March 10, 2026
None None...
KB5077472 - Description of the security update for SQL Server 2017 GDR: March 10, 2026
None None...