CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability

...

CVE-2026-24303

Technical details for CVE-2026-24303 are not publicly available in the provided documents. Monitor for updates from Microsoft and the CVE entry.

CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability

...

CVE-2026-26150

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-26150

The CVE-2026-26150 entry corresponds to a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview eDiscovery that could allow an unauthorized attacker to elevate privileges over a network. The Red Hat, EUVD ENISA, CIRCL, NVD, and MSRC/PTSecurity references corroborate the same descr...

CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

...

CVE-2026-33819 Microsoft Bing Remote Code Execution Vulnerability

...

CVE-2026-33819 Microsoft Bing Remote Code Execution Vulnerability

...

CVE-2026-33819

Technical details for CVE-2026-33819 are not publicly available in the provided documents. Monitor for updates from Microsoft and the CVE listing for affected products, impact, and mitigations.

CVE-2026-33819

Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network...

CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability

...

CVE-2026-33102

Technical details of CVE-2026-33102 are not publicly available in the provided documents; monitor for updates from official sources.

CVE-2026-33102

Url redirection to untrusted site 'open redirect' in M365 Copilot allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability

...

CVE-2026-32210

Server-side request forgery ssrf in Microsoft Dynamics 365 Online allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-32210 Microsoft Dynamics 365 (online) Spoofing Vulnerability

...

UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware

A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite on compromised hosts. "As with many other intrusions in recent years, UNC6692 relied heavily on impersonating IT help des...

Harvester APT Expands Spying Operations with New GoGra Linux Malware

New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control...

MAL-2026-3018 Malicious code in microsoft-employee-experience (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c34bc4b2b8497b2f155f93295b0fe4b78eb94e7830684929547465d0b66b7a7 The package microsoft-employee-experience was found to contain malicious code. Source: ossf-package-analysis...