Search CVEs

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

Azure Entra ID Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability

Azure Entra ID Elevation of Privilege Vulnerability

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Improper input validation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network.

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.

Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally.

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.

Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to e

Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.

Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different

Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.