CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

...

CVE-2026-50481

CVE-2026-50481 affects Azure Active Directory, where modification of assumed-immutable data (maid) enables an authorized attacker to elevate privileges over a network. The CVSS data indicates NETWORK attack vector, LOW access complexity, LOW privileges required, and HIGH confidentiality/integrity...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-59118 Copilot Cowork Elevation of Privilege Vulnerability

...

CVE-2026-59118

Technical details such as affected components, root cause, and patch information are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other sources.

CVE-2026-59118 Copilot Cowork Elevation of Privilege Vulnerability

...

CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-65668

Technical details about CVE-2026-65668 (affected product/versions, root cause, impact) are not publicly provided in the supplied documents. Monitor for updates from the referenced sources (MSRC, NVD, EUVD, CVE.org).

CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-62896

Technical details for CVE-2026-62896 are not publicly available in the provided documents; no affected versions, components, or fixes are specified. Monitor for updates from MSRC/NVD.

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62896 Microsoft Teams Elevation of Privilege Vulnerability

...

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62836

CVE-2026-62836 affects Azure SQL Managed Instance. The vulnerability arises from improper restriction of the communication channel to intended endpoints, enabling a network-based elevation of privileges by an unauthenticated attacker. Affected products include Azure SQL Managed Instance (and rela...

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

Copilot Cowork Elevation of Privilege Vulnerability

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network...

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...

Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...