CVE-2026-62719: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

CVE-2026-61939: Use After Free

Use after free in Winlogon allows an authorized attacker to elevate privileges locally...

CVE-2026-61923: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70307: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-68820: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-61937: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-65798: Numeric Truncation Error

Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...

EUVD-2026-54325

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-54315

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

EUVD-2026-54317

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-56162

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-49163

Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

Azure Active Directory Elevation of Privilege Vulnerability

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

Azure SQL Managed Instance Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50481: Modification of Assumed-Immutable Data (MAID)

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-62896: Improper Authentication

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

CVE-2026-62873: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...