CVE-2026-26124 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

...

CVE-2026-21536 Microsoft Devices Pricing Program Remote Code Execution Vulnerability

...

CVE-2026-26124

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-26124 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

...

CVE-2026-21536 Microsoft Devices Pricing Program Remote Code Execution Vulnerability

...

CVE-2026-21536

Microsoft Devices Pricing Program Remote Code Execution Vulnerability...

CVE-2026-21536

CVE-2026-21536 – Microsoft Devices Pricing Program is a remote code execution vulnerability in the Microsoft Devices Pricing Program. Technical detail from CNVD indicates a code issue caused by improper file upload checksums, enabling a remote attacker to upload malicious files and execute arbitr...

CVE-2026-26124

CVE-2026-26124 concerns Microsoft ACI Confidential Containers with elevation of privilege in Azure Compute Gallery. The description indicates an authorized attacker can locally elevate privileges via a flaw described as '.../...//' in the Compute Gallery. Connected advisories show Microsoft fixed...

CVE-2026-23651

CVE-2026-23651 : A permissive regular expression in Azure Compute Gallery allows an authorized local attacker to elevate privileges. The entry provides a CVSS v3.1 base score of 6.7 (Medium), with local attack vector, high privileges required, no user interaction, and high impact on confidentiali...

CVE-2026-23651 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

...

CVE-2026-28481 OpenClaw < 2026.2.1 - Bearer Token Leakage via MS Teams Attachment Downloader Suffix Matching

OpenClaw versions 2026.1.30 and earlier, contain an information disclosure vulnerability, patched in 2026.2.1, in the MS Teams attachment downloader optional extension must be enabled that leaks bearer tokens to allowlisted suffix domains. When retrying downloads after receiving 401 or 403...

CVE-2026-28481

OpenClaw (npm package) up to version 2026.1.30 contains an information disclosure vulnerability in the MS Teams attachment downloader (extension must be enabled). When retrying downloads after 401/403 responses, the code may send Authorization: Bearer tokens to untrusted hosts that match a permis...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

...

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

Payment Orchestrator Service Elevation of Privilege Vulnerability

...

netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

...

PT-2026-23569

Name of the Vulnerable Software and Affected Versions Microsoft Devices Pricing Program affected versions not specified Description A remote code execution issue exists in the Microsoft Devices Pricing Program. The issue allows for code execution. Recommendations At the moment, there is no...

Microsoft ACI Confidential Containers 安全漏洞

Microsoft ACI Confidential Containers is a Microsoft credentials container. A security vulnerability exists in Microsoft ACI Confidential Containers that stems from an improper design and can be exploited by an attacker to obtain sensitive information...