37414 matches found
CVE-2026-25908
Dell Alienware Command Center AWCC, versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-21515 Azure IoT Central Elevation of Privilege Vulnerability
...
CVE-2026-21515
Technical details of CVE-2026-21515 are not publicly available in the provided documents. Monitor for updates from MSRC/NVD; no specifics on affected components, root cause, or fixes are included.
EUVD-2026-25303
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...
Microsoft ASP.NET (April 2026)
The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by an elevation of privileges vulnerability: - Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24303
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability
...
CVE-2026-24303
Technical details for CVE-2026-24303 are not publicly available in the provided documents. Monitor for updates from Microsoft and the CVE entry.
CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability
...
CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
...
CVE-2026-26150
The CVE-2026-26150 entry corresponds to a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview eDiscovery that could allow an unauthorized attacker to elevate privileges over a network. The Red Hat, EUVD ENISA, CIRCL, NVD, and MSRC/PTSecurity references corroborate the same descr...
CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
...
CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability
...
CVE-2026-33102
Technical details of CVE-2026-33102 are not publicly available in the provided documents; monitor for updates from official sources.
CVE-2026-33102
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability
...
Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
Executive Summary: A bug in Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages can give an attacker the opportunity to execute an Elevation of Privilege attack by forging authentication cookies, and also allows some protected payloads to be decrypted. If an attacker used forged...
GHSA-9MV3-2CWR-P262 Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
Executive Summary: A bug in Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages can give an attacker the opportunity to execute an Elevation of Privilege attack by forging authentication cookies, and also allows some protected payloads to be decrypted. If an attacker used forged...
