Opinions, tips, and news orbiting Microsoft
Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command (‘command injection’) in Azure Pipelines allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only. Continue reading CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. Continue reading CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. Continue reading CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
Improper link resolution before file access (‘link following’) in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability