Vulnerability-Lookup

WID-SEC-W-2026-2689

Vulnerability from csaf_certbund - Published: 2026-08-06 22:00 - Updated: 2026-08-06 22:00

Summary

Microsoft Azure: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Azure ist eine Cloud Computing-Plattform von Microsoft. Microsoft Entra ID (früher Azure Active Directory) ist ein cloudbasierter Identitäts- und Zugriffsverwaltungsdienst von Microsoft.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Entra ausnutzen, um beliebigen Code auszuführen oder erweiterte Berechtigungen zu erlangen.

Betroffene Betriebssysteme: - Windows

CVE-2026-49163

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-50481

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-56161

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-56162

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-59115

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-62830

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-62873

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-65668

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

CVE-2026-68823

Affected products

Known affected 6 products

Product	Identifier	Version
Microsoft Azure SQL Database Microsoft / Azure	`cpe:/a:microsoft:azure:sql_database`	SQL Database
Microsoft Azure Confidential Ledger Microsoft / Azure	`cpe:/a:microsoft:azure:confidential_ledger`	Confidential Ledger
Microsoft Azure Active Directory Microsoft / Azure	`cpe:/a:microsoft:azure:active_directory`	Active Directory
Microsoft Azure Logic Apps Microsoft / Azure	`cpe:/a:microsoft:azure:logic_apps`	Logic Apps
Microsoft Azure SRE Agent Microsoft / Azure	`cpe:/a:microsoft:azure:sre_agent`	SRE Agent
Microsoft Entra Provisioning Service Microsoft / Entra	`cpe:/a:microsoft:entra:provisioning_service`	Provisioning Service

References

12 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://msrc.microsoft.com/update-guide/	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external
https://msrc.microsoft.com/update-guide/vulnerabi…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Azure ist eine Cloud Computing-Plattform von Microsoft.\r\nMicrosoft Entra ID (fr\u00fcher Azure Active Directory) ist ein cloudbasierter Identit\u00e4ts- und Zugriffsverwaltungsdienst von Microsoft.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Entra ausnutzen, um beliebigen Code auszuf\u00fchren oder erweiterte Berechtigungen zu erlangen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-2689 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2689.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-2689 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2689"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
        "url": "https://msrc.microsoft.com/update-guide/"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-50481",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50481"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-56161",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56161"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-65668",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65668"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-62830",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62830"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-49163",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49163"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-59115",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-56162",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56162"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-62873",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873"
      },
      {
        "category": "external",
        "summary": "Microsoft Security Advisory CVE-2026-68823",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68823"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft Azure: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-08-06T22:00:00.000+00:00",
      "generator": {
        "date": "2026-08-07T09:06:11.343+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-2689",
      "initial_release_date": "2026-08-06T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-08-06T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Active Directory",
                "product": {
                  "name": "Microsoft Azure Active Directory",
                  "product_id": "T057706",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:active_directory"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Logic Apps",
                "product": {
                  "name": "Microsoft Azure Logic Apps",
                  "product_id": "T057707",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:logic_apps"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "SRE Agent",
                "product": {
                  "name": "Microsoft Azure SRE Agent",
                  "product_id": "T057708",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:sre_agent"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "SQL Database",
                "product": {
                  "name": "Microsoft Azure SQL Database",
                  "product_id": "T057710",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:sql_database"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Confidential Ledger",
                "product": {
                  "name": "Microsoft Azure Confidential Ledger",
                  "product_id": "T057711",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:azure:confidential_ledger"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Azure"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Provisioning Service",
                "product": {
                  "name": "Microsoft Entra Provisioning Service",
                  "product_id": "T057709",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:entra:provisioning_service"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Entra"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-49163",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-49163"
    },
    {
      "cve": "CVE-2026-50481",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-50481"
    },
    {
      "cve": "CVE-2026-56161",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-56161"
    },
    {
      "cve": "CVE-2026-56162",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-56162"
    },
    {
      "cve": "CVE-2026-59115",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-59115"
    },
    {
      "cve": "CVE-2026-62830",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-62830"
    },
    {
      "cve": "CVE-2026-62873",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-62873"
    },
    {
      "cve": "CVE-2026-65668",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-65668"
    },
    {
      "cve": "CVE-2026-68823",
      "product_status": {
        "known_affected": [
          "T057710",
          "T057711",
          "T057706",
          "T057707",
          "T057708",
          "T057709"
        ]
      },
      "release_date": "2026-08-06T22:00:00.000+00:00",
      "title": "CVE-2026-68823"
    }
  ]
}

CVE-2026-49163 (GCVE-0-2026-49163)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:57 Exclusively Hosted Service

Title

Application Insights Profiler Elevation of Privilege Vulnerability

Summary

Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-07 17:27 UTC

CWE

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Application Insights Profiler	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-49163",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-07T17:27:18.522453Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-07T17:28:45.754Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Application Insights Profiler",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:application_insights_profiler:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper limitation of a pathname to a restricted directory (\u0027path traversal\u0027) in Application Insights Profiler allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-22",
              "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:57:48.768Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Application Insights Profiler Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49163"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Application Insights Profiler Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-49163",
    "datePublished": "2026-08-06T22:37:41.371Z",
    "dateReserved": "2026-05-27T23:44:09.622Z",
    "dateUpdated": "2026-08-12T17:57:48.768Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-50481 (GCVE-0-2026-50481)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:54 Exclusively Hosted Service

Title

Azure Active Directory Elevation of Privilege Vulnerability

Summary

Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-06 00:00 UTC

CWE

CWE-471 - Modification of Assumed-Immutable Data (MAID)

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Active Directory	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-50481",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-07T03:56:07.170Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Active Directory",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_active_directory:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-471",
              "description": "CWE-471: Modification of Assumed-Immutable Data (MAID)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:54:00.605Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Active Directory Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50481"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Active Directory Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-50481",
    "datePublished": "2026-08-06T22:37:38.619Z",
    "dateReserved": "2026-06-04T18:59:53.336Z",
    "dateUpdated": "2026-08-12T17:54:00.605Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56161 (GCVE-0-2026-56161)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:57 Exclusively Hosted Service

Title

Azure Logic Apps Information Disclosure Vulnerability

Summary

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-07 01:04 UTC

CWE

CWE-284 - Improper Access Control

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Logic Apps	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56161",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-07T01:04:02.634058Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-07T01:04:10.133Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Logic Apps",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_logic_apps:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:57:45.537Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Logic Apps Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56161"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Logic Apps Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-56161",
    "datePublished": "2026-08-06T22:37:42.437Z",
    "dateReserved": "2026-06-19T13:53:31.988Z",
    "dateUpdated": "2026-08-12T17:57:45.537Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56162 (GCVE-0-2026-56162)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:57 Exclusively Hosted Service

Title

Azure SQL Database Elevation of Privilege Vulnerability

Summary

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

Severity

10 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-06 00:00 UTC

CWE

CWE-287 - Improper Authentication

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure SQL Database	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56162",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-08T03:55:17.360Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure SQL Database",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_sql_database:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287: Improper Authentication",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:57:47.728Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure SQL Database Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56162"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure SQL Database Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-56162",
    "datePublished": "2026-08-06T22:37:44.324Z",
    "dateReserved": "2026-06-19T13:53:31.988Z",
    "dateUpdated": "2026-08-12T17:57:47.728Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59115 (GCVE-0-2026-59115)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:53 Exclusively Hosted Service

Title

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Summary

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-06 00:00 UTC

CWE

CWE-35 - Path Traversal: '.../...//'

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Microsoft Entra Provisioning Service	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59115",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-07T03:56:08.210Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft Entra Provisioning Service",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:entra_provisioning_service:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "\u0027.../...//\u0027 in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-35",
              "description": "CWE-35: Path Traversal: \u0027.../...//\u0027",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:53:59.432Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-59115",
    "datePublished": "2026-08-06T22:37:40.751Z",
    "dateReserved": "2026-07-02T16:05:24.069Z",
    "dateUpdated": "2026-08-12T17:53:59.432Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-62830 (GCVE-0-2026-62830)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:57 Exclusively Hosted Service

Title

Azure SRE Agent Elevation of Privilege Vulnerability

Summary

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Severity

9.9 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-07 14:23 UTC

CWE

CWE-862 - Missing Authorization

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure SRE Agent	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-62830",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-07T14:23:51.403313Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-07T14:24:02.314Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure SRE Agent",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_sre_agent:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862: Missing Authorization",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:57:45.070Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure SRE Agent Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62830"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure SRE Agent Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-62830",
    "datePublished": "2026-08-06T22:37:43.067Z",
    "dateReserved": "2026-07-14T21:10:38.082Z",
    "dateUpdated": "2026-08-12T17:57:45.070Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-62873 (GCVE-0-2026-62873)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:54 Exclusively Hosted Service

Title

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

Summary

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-06 00:00 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Microsoft 365 Admin Center	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-62873",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-08T03:55:16.129Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft 365 Admin Center",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:365_admin_center:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:54:01.819Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft 365 Admin Center Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Microsoft 365 Admin Center Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-62873",
    "datePublished": "2026-08-06T22:37:47.045Z",
    "dateReserved": "2026-07-14T21:13:55.100Z",
    "dateUpdated": "2026-08-12T17:54:01.819Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-65668 (GCVE-0-2026-65668)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:53 Exclusively Hosted Service

Title

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Summary

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-06 00:00 UTC

CWE

CWE-284 - Improper Access Control

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Microsoft Purview eDiscovery	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-65668",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-06T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-07T03:56:09.276Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Microsoft Purview eDiscovery",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:office_purview_ediscovery:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-284",
              "description": "CWE-284: Improper Access Control",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:53:58.246Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Microsoft Purview eDiscovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65668"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Microsoft Purview eDiscovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-65668",
    "datePublished": "2026-08-06T22:37:36.483Z",
    "dateReserved": "2026-07-22T18:16:01.897Z",
    "dateUpdated": "2026-08-12T17:53:58.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-68823 (GCVE-0-2026-68823)

Vulnerability from cvelistv5 – Published: 2026-08-06 22:37 – Updated: 2026-08-12 17:57 Exclusively Hosted Service

Title

Azure Confidential Ledger Remote Code Execution Vulnerability

Summary

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-07 17:29 UTC

CWE

CWE-749 - Exposed Dangerous Method or Function

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Confidential Ledger	Affected: -

Date Public

2026-08-06 14:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-68823",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-07T17:29:35.083081Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-07T17:30:06.118Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Azure Confidential Ledger",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_confidential_ledger:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "-",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-08-06T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-749",
              "description": "CWE-749: Exposed Dangerous Method or Function",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-12T17:57:49.314Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Confidential Ledger Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68823"
        }
      ],
      "tags": [
        "exclusively-hosted-service"
      ],
      "title": "Azure Confidential Ledger Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-68823",
    "datePublished": "2026-08-06T22:37:41.958Z",
    "dateReserved": "2026-07-31T16:41:44.244Z",
    "dateUpdated": "2026-08-12T17:57:49.314Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

WID-SEC-W-2026-2689

CVE-2026-49163 (GCVE-0-2026-49163)

CVE-2026-50481 (GCVE-0-2026-50481)

CVE-2026-56161 (GCVE-0-2026-56161)

CVE-2026-56162 (GCVE-0-2026-56162)

CVE-2026-59115 (GCVE-0-2026-59115)

CVE-2026-62830 (GCVE-0-2026-62830)

CVE-2026-62873 (GCVE-0-2026-62873)

CVE-2026-65668 (GCVE-0-2026-65668)

CVE-2026-68823 (GCVE-0-2026-68823)

Tags

Sightings

Nomenclature