CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

CVE-2026-26145

CVE-2026-26145 concerns Microsoft Azure Synapse with an elevation-of-privilege flaw caused by improper access control. Affected software is Azure Synapse; the core issue is inadequate access controls that permit an authorized attacker to elevate privileges over a network. The public-facing materi...

PYSEC-2026-664 Matrix Synapse Security Filtering Flaw

The ongetmissingevents function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the getmissingevents federation API where event visibility rules were not applied correctly...

PYSEC-2026-663 Uncontrolled Resource Consumption in Matrix Synapse

Impact Synapse before 1.52.0 with URL preview functionality enabled will attempt to generate URL previews for media stream URLs without properly limiting connection time. Connections will only be terminated after maxspidersize default: 10M bytes have been downloaded, which can in some cases lead ...

Microsoft Azure Synapse Elevation of Privilege Vulnerability

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network...

PT-2026-55317

Name of the Vulnerable Software and Affected Versions Azure Synapse affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contains a...

KLA91129 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure Synapse can be exploited remotely ...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: mitmproxy, ansible-operator, openstack-placement-2026.1-fips, openstack-kolla-toolbox-2026.1-fips, openstack-glance-2025.2-fips, authentik-fips, nvidia-nsight-compute-13.3, kubeflow-katib, openstack-keystone-2025.1, dbt-bigquery, request-1276,...

Microsoft Azure Synapse permission licensing and access control issue vulnerabilities

Microsoft Azure Synapse is a cloud data analysis service provided by the American company Microsoft. There are vulnerabilities related to permission licensing and access control in Microsoft Azure Synapse. These vulnerabilities stem from issues with privilege escalation; attackers can exploit the...

CVE-2026-48584

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

CVE-2026-48584

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

EUVD-2026-38088

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

CVE-2026-48584

CVE-2026-48584 affects Microsoft Azure Synapse. An authorized attacker with low privileges and network access can execute with unnecessary privileges to elevate to higher privileges across the system, with potential impact to confidentiality, integrity and availability (CVSS 3.1: CRITICAL, AV:N/A...

CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability

...

PT-2026-51034

Name of the Vulnerable Software and Affected Versions Azure Synapse affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version th...

Microsoft Azure Synapse Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network...

GHSA-PW6J-QG29-8W7F vulnerabilities

Vulnerabilities for packages: mitmproxy, datahub-ingestion-fips, dask-kubernetes-fips, airflow, synapse...

CVE-2026-45078

A flaw was found in Synapse, an open source Matrix homeserver implementation. Local authenticated users can exploit this vulnerability to consume excessive CPU resources, causing the server to become unresponsive and denying service to other users. This can lead to a complete Denial of Service Do...

CVE-2026-45076

A flaw was found in Synapse, an open source Matrix homeserver implementation. A remote attacker, specifically a malicious homeserver, can craft room events in federated rooms to prevent Synapse from providing full history to paginating clients. This leads to a denial of service, where clients fai...