CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability
Azure Entra ID Elevation of Privilege Vulnerability Continue reading CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability
Month: January 2026
CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory (‘path traversal’) in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability
CVE-2026-24307 M365 Copilot Information Disclosure Vulnerability
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-24307 M365 Copilot Information Disclosure Vulnerability
CVE-2026-21521 Word Copilot Information Disclosure Vulnerability
Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network. Continue reading CVE-2026-21521 Word Copilot Information Disclosure Vulnerability
Four priorities for AI-powered identity and network access security in 2026
Discover four key identity and access priorities for the new year to strengthen your organization’s identity security baseline.
The post Four priorities for AI-powered identity and network access security in 2026 appeared first on Microsoft Security Blog.
Continue reading Four priorities for AI-powered identity and network access security in 2026
Chromium: CVE-2026-0908 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information. Continue reading Chromium: CVE-2026-0908 Use after free in ANGLE
Chromium: CVE-2026-0907 Incorrect security UI in Split View
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information. Continue reading Chromium: CVE-2026-0907 Incorrect security UI in Split View
Chromium: CVE-2026-0906 Incorrect security UI
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information. Continue reading Chromium: CVE-2026-0906 Incorrect security UI