111 matches found
What’s new in Microsoft Security: September 2026
AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to see those agents, govern what they can reach, and contain them when something goes wrong. This month's updates help you discover and control local AI agents, extend Zero Trust to...
Microsoft Purview eDiscovery Privilege Escalation
The vulnerability of the Microsoft Purview eDiscovery tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
EUVD-2026-54313
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...
CVE-2026-65668: Improper Access Control
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...
CVE-2026-65668
Technical details about CVE-2026-65668 (affected product/versions, root cause, impact) are not publicly provided in the supplied documents. Monitor for updates from the referenced sources (MSRC, NVD, EUVD, CVE.org).
CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
...
CVE-2026-65668 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
...
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network...
KLA91190 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
PT-2026-68838
Name of the Vulnerable Software and Affected Versions Microsoft Purview eDiscovery affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version...
Reconstructing AI activity in investigations
AI systems are now part of everyday work. Investigators need a consistent way to reconstruct what happened within them. Security teams are already investigating activity involving Microsoft 365 Copilot and Azure AI services—from prompt injection attempts to unexpected data access. Those signals a...
Microsoft Purview eDiscovery Privilege Escalation
The vulnerability of the Microsoft Purview eDiscovery tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
CVE-2026-26150
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-25304
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26150
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-26150
The CVE-2026-26150 entry corresponds to a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview eDiscovery that could allow an unauthorized attacker to elevate privileges over a network. The Red Hat, EUVD ENISA, CIRCL, NVD, and MSRC/PTSecurity references corroborate the same descr...
CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
...
CVE-2026-26150
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...