Azure SRE Agent Elevation of Privilege Vulnerability
CVE-2026-62830
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
#msrc
共收录 2151 条相关情报。
← 返回所有主题Azure Logic Apps Information Disclosure Vulnerability
CVE-2026-56161
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Application Insights Profiler Elevation of Privilege Vulnerability
CVE-2026-49163
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows a
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove
Microsoft Teams Spoofing Vulnerability
CVE-2026-62918
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing
Azure Active Directory Elevation of Privilege Vulnerability
CVE-2026-50481
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privile
Microsoft Power Apps Elevation of Privilege Vulnerability
CVE-2026-59118
Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
CVE-2026-65668
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a netwo
Microsoft Teams Elevation of Privilege Vulnerability
CVE-2026-62896
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Azure SQL Managed Instance Elevation of Privilege Vulnerability
CVE-2026-62836
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized
Chromium: CVE-2026-18013 Inappropriate implementation in Chrome for iOS
CVE-2026-18013
CVE-2026-18013 是 Chromium 项目中的一个安全漏洞，其问题类型为“不恰当的实现”（Inappropriate implementation），主要影响 Chrome for iOS 浏览器。由于 Microsoft E
Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS
CVE-2026-18016
CVE-2026-18016 是一个由 Chromium 项目分配并修复的安全漏洞，涉及 Chrome for iOS 中的策略执行不足（Insufficient policy enforcement）。该漏洞由 Google Chrome
Chromium: CVE-2026-17835 Inappropriate implementation in Chrome for iOS
CVE-2026-17835
该CVE由Google Chrome团队分配，涉及Chrome for iOS中的“不当实现”（Inappropriate implementation）类安全问题。由于Microsoft Edge（基于Chromium内核）会集成Chro
Chromium: CVE-2026-17838 Incorrect security UI in Chrome for iOS
CVE-2026-17838
CVE-2026-17838 是 Chromium 项目中的一个安全性用户界面（Security UI）显示不当漏洞，主要影响 Chrome for iOS 以及所有基于 Chromium 内核的浏览器（如 Microsoft Edge）。
Chromium: CVE-2026-17839 Inappropriate implementation in Chrome for iOS
CVE-2026-17839
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-17841 Race in Chrome for iOS
CVE-2026-17841
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-17842 Inappropriate implementation in Chrome for iOS
CVE-2026-17842
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-17849 Inappropriate implementation in Chrome for iOS
CVE-2026-17849
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-17863 Inappropriate implementation in Browser
CVE-2026-17863
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Chromium: CVE-2026-17864 Inappropriate implementation in Updater
CVE-2026-17864
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.