CVE-2026-20967

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network...

CVE-2026-26141 Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

...

CVE-2026-26141

CVE-2026-26141 corresponds to an Elevation of Privilege in the Hybrid Worker Extension (Arc-enabled Windows VMs) of Azure Arc, caused by improper authentication that could let an authorized attacker escalate privileges locally. The CVE entry notes a HIGH base score (CVSS 3.1: 7.8, LOCAL, LOW user...

CVE-2026-26118

CVE-2026-26118 – Azure MCP Server Tools SSRF allows an authorized attacker to elevate privileges. Affected component: MCP Server Tools. Root cause: server-side request forgery enabling elevation of privilege with network access. CVSSv3.1 base score 8.8 (High); Vector: Network; Privileges required...

CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability

...

CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability

...

CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2026-26117

CVE-2026-26117 concerns Arc Enabled Servers running the Azure Connected Machine Agent. The vulnerability is an Elevation of Privilege issue affecting the Azure Arc-enabled machine agent on Arc-enabled servers. According to the CVSS data, it is a local, low-complexity attack requiring LOW privileg...

CVE-2026-26117 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2026-23665 Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

...

CVE-2026-23665

Technical details and affected product/version are not provided in the supplied documents; monitor for updates from official sources.

CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

...

CVE-2026-26148

The CVE-2026-26148 issue affects the Microsoft Azure AD SSH Login extension for Linux, causing elevation of privilege. According to the provided metrics, the vulnerability is a LOCAL, high-severity flaw (CVSS 3.1: 8.1) with no required user interaction and no privileges required. The attack compl...

CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2026-26134 Microsoft Office Elevation of Privilege Vulnerability

...

CVE-2026-26134

CVE-2026-26134 is an elevation-of-privilege vulnerability in Microsoft Office resulting from an integer overflow/wraparound in Office components, allowing an authenticated local attacker to elevate privileges. Public sources in the connected documents confirm the impact as local privilege escalat...

CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-26132 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2026-26131 .NET Elevation of Privilege Vulnerability

...

CVE-2026-26132

CVE-2026-26132 is a Windows Kernel elevation-of-privilege vulnerability with a 7.8 CVSS score (3.1). Attack vector is LOCAL, complexity LOW, privileges required LOW, user interaction NONE, and scope UNCHANGED; impact is HIGH on confidentiality, integrity, and availability. Exploitation status: UN...