Microsoft

  • CVE-2026-67643

    Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.

  • CVE-2026-72950

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim’s machine

  • CVE-2026-70200

    Improper limitation of a pathname to a restricted directory (‘path traversal’) in Azure Logic Apps allows an unauthorized attacker to elevate privileges…

  • CVE-2026-85889

    Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-69399

    Azure Arc Elevation of Privilege Vulnerability

  • CVE-2026-83944

    Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-70009

    Improper limitation of a pathname to a restricted directory (‘path traversal’) in Azure Arc allows an unauthorized attacker to elevate privileges over…

  • CVE-2026-62874

    Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-105723

    Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-70262

    Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.