Opinions, tips, and news orbiting Microsoft
Url redirection to untrusted site (‘open redirect’) in M365 Copilot allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-33102 Microsoft 365 Copilot Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-33819 Microsoft Bing Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-26150 Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability
Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network. Continue reading CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability
Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-35431 Microsoft Entra ID Entitlement Management Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-21515 Azure IoT Central Elevation of Privilege Vulnerability