CVE-2026-16997 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management...

CVE-2026-16996 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow...

CVE-2026-16996

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow...

CVE-2026-16991

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to local privilege escalation caused by improper handling of symbolic links; a low-privilege local attacker can exploit this to gain full confidentiality, integrity, and availability impact (CVSS 7.8 HIGH). No exploit or patch details are provid...

CVE-2026-69543

An SSRF vulnerability in Azure Virtual Machines allows an authorized low-privilege attacker to elevate privileges over a network, with a HIGH CVSS 3.1 base score of 8.5. No patch version, workaround, or exploitation evidence is provided in the documents.

CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-69555

Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-69400

Azure Logic Apps path traversal flaw allows unauthenticated network attackers to elevate privileges. CVSS 9.6 (Critical) with high confidentiality, integrity, and availability impact. Microsoft Security Response Center is tracking the issue at the linked update guide; no patch version or exploita...

CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability

...

CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-68782

An SQL injection flaw in Azure SQL Database allows an authenticated, low-privilege network attacker to elevate privileges, with CVSS 9.9 (Critical) reflecting full confidentiality, integrity, and availability impact. Microsoft's update guide is the primary remediation reference; no patch version ...

CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-66309

CVE-2026-66309 is a Critical (CVSS 9.1) elevation-of-privilege flaw in Azure SQL Database; an authenticated, high-privilege attacker can escalate privileges over the network, affecting confidentiality, integrity, and availability. No affected versions, root cause, or patch details are provided in...

CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-65816

Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability

...

CVE-2026-63509 Microsoft Fabric Elevation of Privilege Vulnerability

...

CVE-2026-63509

A critical (CVSS 9.9) relative path traversal vulnerability in Microsoft Fabric allows an authenticated, low-privileged attacker over the network to elevate privileges, impacting confidentiality, integrity, and availability. No affected versions, exploit details, or patch information are provided...