37296 matches found
CVE-2026-32204
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-33821 Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
...
CVE-2026-33821 Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
...
CVE-2026-33821
CVE-2026-33821 affects Microsoft Dynamics 365 Customer Insights and is an Elevation of Privilege due to improper privilege management. An authenticated attacker could elevate privileges across the network. The vulnerability is confirmed by multiple sources and Microsoft has released updates; impl...
CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
CVE-2026-42838 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
CVE-2026-42838
CVE-2026-42838 affects Microsoft Edge (Chromium-based). The issue is caused by improper neutralization of special elements in output used by a downstream component ('injection'), enabling a remote attacker to elevate privileges over a network. Affected product scope includes Microsoft Edge (Chrom...
CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
...
CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
...
CVE-2026-42830
The CVE-2026-42830 entry concerns the Azure Monitor Agent Metrics Extension, where an untrusted search path leads to local privilege elevation for an authorized attacker. Reported impact is Privilege Escalation with High integrity impact, from the Azure Monitor Agent; CVSS 3.1 base score 6.5 (Loc...
CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-42823
Azure Logic Apps is affected by CVE-2026-42823 due to improper access control that may allow an authorized attacker to elevate privileges over a network. The CVSS 3.1 metrics indicate a CRITICAL score (9.9) with network attack vector, low complexity, and privileges required, and impacts to confid...
CVE-2026-41613 Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
...
CVE-2026-41103 Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability
...
EUVD-2026-29696
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-41103
CVE-2026-41103 concerns the Microsoft SSO Plugin for Jira & Confluence, where an incorrect authentication algorithm implementation allows privilege elevation over a network. The risk is described as network-exploitable with no user interaction, high confidentiality and integrity impact, and no av...
CVE-2026-41613 Visual Studio Code Elevation of Privilege Vulnerability
...
CVE-2026-41613
CVE-2026-41613 involves session fixation in Visual Studio Code that allows an unauthorized attacker to elevate privileges over a network. The connected sources corroborate the affected product as Visual Studio Code and describe the impact as privilege elevation via network access. The available d...