Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-65667
CVE-2026-65667 是微软 Teams 中存在的一个授权缺失漏洞。根据 NVD 提供的元数据，该漏洞允许未经授权的攻击者通过网络利用此缺陷进行权限提升。CVSS v3.1 评分为 10.0，属于严重级别，攻击向量为网络（AV:N）
2026-08-07 归档
今日共收录 1483 条安全情报，包含 647 个 CVE，430 篇安全通告，以及 120 篇研究论文。
← 返回归档列表Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-63508
CVE-2026-63508 是 Microsoft Planetary Computer Pro 中存在的一个关键函数缺少身份验证漏洞。该漏洞允许未经授权的攻击者通过网络远程提升权限，CVSS 评分为 10.0（严重），攻击向量为网络，攻
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
CVE-2026-62896
CVE-2026-62896 是 Microsoft Teams 中存在的一处身份验证不当漏洞。根据 NVD 提供的元数据，该漏洞允许已获得授权的攻击者通过网络利用此缺陷实现权限提升。漏洞的 CVSS 评分为 9.6，属于严重级别。其攻击向
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62873
CVE-2026-62873 是 Microsoft 365 Admin Center 中的一个加密签名验证不当漏洞。该漏洞源于对加密签名的验证不充分，使得未经身份验证的攻击者能够在网络环境中提升权限。由于攻击无需任何前置条件，且利用复杂度
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-62830
CVE-2026-62830 是 Azure SRE Agent 中存在的一个缺失授权漏洞。根据 NVD 描述，该漏洞允许已授权攻击者通过网络提升权限。CVSS 3.1 评分为 9.9，攻击向量为网络（AV:N），攻击复杂度低（AC:L），
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-59118
CVE-2026-59118 是 Microsoft Power Apps 中存在的一处授权不当（Improper Authorization）漏洞。根据 NVD 提供的元数据，远程网络攻击者可在无需预先认证（PR:N）的情况下，通过诱导用
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVE-2026-59115
CVE-2026-59115 是 Microsoft Entra Provisioning Service（又称 SyncFabric）中存在的一个路径遍历类漏洞，其触发模式为 '.../...//'。该漏洞允许已获得合法认证（author
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-56162
CVE-2026-56162 是 Microsoft Azure SQL Database 中已披露的认证不当漏洞。攻击者可在无需任何凭证的情况下，通过网络远程利用该漏洞实施权限提升，CVSS v3.1 评分为满分 10.0（AV:N/AC
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
CVE-2026-56161
CVE-2026-56161 是微软 Azure Logic Apps 中存在的不当访问控制漏洞。该漏洞允许已授权攻击者通过网络披露敏感信息，CVSS 评分为 9.6，属于严重级别。攻击向量为网络，攻击复杂度低，所需权限仅为低权限，且无需用
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
CVE-2026-50515
CVE-2026-50515 是微软 Azure Service Bus 中存在的一个严重反序列化漏洞，CVSS 评分为 9.9（Critical）。该漏洞源于对不可信数据的反序列化处理，使得已获得低权限的授权攻击者能够通过网络远程执行任意
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
CVE-2026-50481
CVE-2026-50481 是 Azure Active Directory（现 Microsoft Entra ID）中的一个高危漏洞，其核心问题被归类为“修改假定不可变数据”（Modification of Assumed-Immut
ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633
ngx-extended-pdf-viewer embeds a fork of Mozilla's pdf.js rather than depending on pdfjs-dist, so this vulnerability is
Cloud & Application Security
Cloud & Application Security
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Next-Gen Identity Security
Next-Gen Identity Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Named an Innovation and Growth Leader in the 2026 Frost Radar™: Cloud and Application Runtime Security
CrowdStrike Expands Identity Leadership with OpenID and IDPro
CrowdStrike Expands Identity Leadership with OpenID and IDPro
cloud architecture assessment
cloud architecture assessment
ransomware and multifaceted extortion defense
ransomware and multifaceted extortion defense
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content on-demand
Google Cloud Next 2026Catch-up sessions on the keynotes and select sessions are now available on demand.Explore content