CVE-2026-26138

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-26139 Microsoft Purview Elevation of Privilege Vulnerability

...

CVE-2026-26138 Microsoft Purview Elevation of Privilege Vulnerability

...

CVE-2026-26139

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-26138 Microsoft Purview Elevation of Privilege Vulnerability

...

CVE-2026-26139 Microsoft Purview Elevation of Privilege Vulnerability

...

CVE-2026-26138

CVE-2026-26138 describes a server-side request forgery (SSRF) in Microsoft Purview that enables an attacker to achieve a network-based privilege elevation. The connected sources confirm the vulnerable product (Microsoft Purview) and the impact (privilege escalation) via SSRF, but do not provide g...

Microsoft Purview Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

Microsoft Purview Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network...

PT-2026-26357

Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description The software contains a server-side request forgery ssrf issue. This allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

Microsoft Purview 代码问题漏洞

Microsoft Purview is a data security and management software developed by the American company Microsoft. There is a code vulnerability in Microsoft Purview, which stems from server-side request forgery. This vulnerability could allow unauthorized attackers to gain elevated privileges through the...

KLA90949 PE vulnerabilities in Microsoft Office

An elevation of privilege vulnerabilities were found in Microsoft Purview. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2026-26138 CVE-2026-26139 Exploitation CVE list CVE-2026-26138 critical CVE-2026-26139 critical KB list Solution Install necessa...

PT-2026-26356

Name of the Vulnerable Software and Affected Versions Microsoft Purview affected versions not specified Description Server-side request forgery ssrf exists in Microsoft Purview, potentially allowing an unauthorized attacker to elevate privileges over a network. SSRF occurs when a server processes...

Microsoft Purview 代码问题漏洞

Microsoft Purview is a data security and management software developed by the American company Microsoft. There is a code vulnerability in Microsoft Purview, which stems from server-side request forgery. This vulnerability could allow unauthorized attackers to gain elevated privileges through the...

New Microsoft Purview innovations for Fabric to safely accelerate your AI transformation

As organizations adopt AI, security and governance remain core primitives for safe AI transformation and acceleration. After all, data leaders are aware of the notion that: Your AI is only as good as your data. Organizations are skeptical about AI transformation due to concerns of sensitive data...

CVE-2025-64676

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

CVE-2025-64676

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

CVE-2025-64676

CVE-2025-64676 concerns Microsoft Purview eDiscovery Remote Code Execution. A flaw in Purview (via the // path) allows an authorized attacker to execute code over the network. Affected software is Microsoft Purview/eDiscovery; the root cause is a path-related/code-execution flaw that can enable t...

EUVD-2025-204413

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network...

CVE-2025-64676 Microsoft Purview eDiscovery Remote Code Execution Vulnerability

...