378 matches found
CVE-2026-73298
The CVE-2026-73298 entry concerns the Microsoft Container Migration Solution Accelerator (multi-service AI-driven migration tool) with vulnerability in version 2.1.2 and earlier. The issue is an authenticated IDOR (Insecure Direct Object Reference) that permits reading, writing, and deleting proc...
CVE-2026-73298 Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes
The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service. In version 2.1.2 and earlier, a security vulnerability was identified in the...
CVE-2026-62869
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
...
EUVD-2026-56779
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...
CVE-2026-62869
CVE-2026-62869 affects Azure Entra ID and related services (Azure Active Directory, Entra ID, Entra Provisioning Service, SRE Agent, etc.). The root cause is insufficient verification of data authenticity, enabling an authorized attacker to perform network spoofing. Affected components include Az...
CVE-2026-62869 Azure Entra ID Spoofing Vulnerability
...
CVE-2026-65673
Entra Connect Elevation of Privilege Vulnerability...
CVE-2026-65673 Microsoft Entra Connect Elevation of Privilege Vulnerability
...
CVE-2026-65673 Microsoft Entra Connect Elevation of Privilege Vulnerability
...
CVE-2026-65673
Technical details about CVE-2026-65673 are not publicly available in the provided documents. Monitor for updates.
Microsoft Entra Connect Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally...
PT-2026-70660
Name of the Vulnerable Software and Affected Versions Entra Connect affected versions not specified Description An elevation of privilege issue exists in Entra Connect, which could allow an attacker to gain higher-level permissions than intended. Recommendations At the moment, there is no...
PT-2026-70570
Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description Insufficient verification of data authenticity allows an authorized attacker to perform spoofing over a network. Recommendations At the moment, there is no information about a newer...
KLA91203 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed,...
EUVD-2026-54317
'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...