Month: August 2026

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. Continue reading CVE-2026-62918 Microsoft Teams Spoofing Vulnerability→

Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability→

Improper limitation of a pathname to a restricted directory (‘path traversal’) in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability→

‘…/…//’ in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability→

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. Continue reading CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability→

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. Continue reading CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability→

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. Continue reading CVE-2026-65667 Microsoft Teams Elevation of Privilege Vulnerability→

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. Continue reading CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability→