EUVD-2026-41444

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...

CVE-2026-26145

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...

CVE-2026-26145

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...

CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

CVE-2026-26145

CVE-2026-26145 concerns Microsoft Azure Synapse with an elevation-of-privilege flaw caused by improper access control. Affected software is Azure Synapse; the core issue is inadequate access controls that permit an authorized attacker to elevate privileges over a network. The public-facing materi...

Microsoft Azure Synapse Elevation of Privilege Vulnerability

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...

PT-2026-55317

Name of the Vulnerable Software and Affected Versions Azure Synapse affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contains a...

KLA91129 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure Synapse can be exploited remotely ...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, openstack-glance-2026.1-fips, dask-kubernetes-fips, openstack-horizon-2025.2-fips, openstack-glance-2025.2-fips, openstack-horizon-2025.1, openstack-placement-2025.2-fips, openstack-placement-2025.2, openstack-tempest-2026.1,...

CVE-2026-48584

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

CVE-2026-48584

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

CVE-2026-48584

CVE-2026-48584 affects Microsoft Azure Synapse. An authorized attacker with low privileges and network access can execute with unnecessary privileges to elevate to higher privileges across the system, with potential impact to confidentiality, integrity and availability (CVSS 3.1: CRITICAL, AV:N/A...

CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

EUVD-2026-38088

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

PT-2026-51034

Name of the Vulnerable Software and Affected Versions Azure Synapse affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version th...

Microsoft Azure Synapse Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

GHSA-PW6J-QG29-8W7F vulnerabilities

Vulnerabilities for packages: mitmproxy, dask-kubernetes-fips, datahub-ingestion-fips, synapse, airflow...

CVE-2026-45076

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...