145740 matches found
EUVD-2026-25303
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...
EUVD-2026-25310
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-25308
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...
EUVD-2026-25312
Server-side request forgery ssrf in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-25304
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
Microsoft ASP.NET (April 2026)
The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by an elevation of privileges vulnerability: - Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...
📄 Microsoft SQL Server 2022/2025 Privilege Escalation
This Python script demonstrates a privilege escalation technique targeting Microsoft SQL Server, associated with CVE-2025-24999. The exploit abuses improper permission controls on system stored procedures in the msdb database to elevate a low-privileged account to SYSADMIN...
Microsoft Partner Center Access Control Vulnerability
Microsoft Partner Center is a Microsoft partner management platform for partners to manage customers, subscriptions and billing. An access control vulnerability exists in Microsoft Partner Center. The vulnerability stems from a failure to properly validate user privileges, resulting in improper...
📄 Microsoft MMC (.MSC) File Execution Abuse Leading / Admin Creation
This Metasploit local Windows exploit module abuses the way Microsoft Management Console MMC processes specially crafted .msc files to achieve arbitrary PowerShell execution when a user opens the file. The payload is designed to create a new local administrator account or execute a custom command...
CVE-2026-33102
Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-33819
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network...
CVE-2026-32172
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...
CVE-2026-26150
Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24303
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability
...
CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability
...
CVE-2026-32172
Technical details for CVE-2026-32172 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-35431 Microsoft Entra ID Entitlement Management Spoofing Vulnerability
...
CVE-2026-35431
CVE-2026-35431 covers a spoofing vulnerability in Microsoft Entra ID Entitlement Management. The entry indicates a remote, network-exploitable flaw with no user interaction, causing high impact to confidentiality, integrity, and availability (S:C, C:H, I:H, A:H). Exploit code maturity is UNPROVEN...