CVE-2026-8325 - PDF File Parsing Out-of-Bounds Write Vulnerability in Autodesk Revit
CVE ID :CVE-2026-8325
Published : Aug. 6, 2026, 10:18 p.m. | 1 hour, 51 minutes ago
Description :A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-8325
Published : Aug. 6, 2026, 10:18 p.m. | 1 hour, 51 minutes ago
Description :A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-15805 - Rejected reason: This CVE ID has been rejected or
CVE ID :CVE-2026-15805
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-15805
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-17264 - Medixant RadiAnt DICOM Out-of-bounds write
CVE ID :CVE-2026-17264
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-17264
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
Severity: 4.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-49163 - Application Insights Profiler Elevation of Privilege Vulnerability
CVE ID :CVE-2026-49163
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-49163
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-50481 - Azure Active Directory Elevation of Privilege Vulnerability
CVE ID :CVE-2026-50481
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-50481
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-50515 - Azure Service Bus Remote Code Execution Vulnerability
CVE ID :CVE-2026-50515
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-50515
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-56161 - Azure Logic Apps Information Disclosure Vulnerability
CVE ID :CVE-2026-56161
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-56161
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-56162 - Azure SQL Database Elevation of Privilege Vulnerability
CVE ID :CVE-2026-56162
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-56162
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-59115 - Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CVE ID :CVE-2026-59115
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-59115
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-59118 - Microsoft Power Apps Elevation of Privilege Vulnerability
CVE ID :CVE-2026-59118
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-59118
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62830 - Azure SRE Agent Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62830
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62830
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62836 - Azure SQL Managed Instance Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62836
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62836
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62873 - Microsoft 365 Admin Center Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62873
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62873
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62896 - Microsoft Teams Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62896
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62896
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62918 - Microsoft Teams Spoofing Vulnerability
CVE ID :CVE-2026-62918
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62918
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-63508 - Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
CVE ID :CVE-2026-63508
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-63508
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65667 - Microsoft Teams Elevation of Privilege Vulnerability
CVE ID :CVE-2026-65667
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-65667
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65668 - Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
CVE ID :CVE-2026-65668
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-65668
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-68823 - Azure Confidential Ledger Remote Code Execution Vulnerability
CVE ID :CVE-2026-68823
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-68823
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-70332 - Microsoft Office SharePoint Spoofing Vulnerability
CVE ID :CVE-2026-70332
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-70332
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-19190 - StableBit Scanner ScannerService Scanner.Service.exe permission
CVE ID :CVE-2026-19190
Published : Aug. 7, 2026, 2:30 a.m. | 1 hour, 39 minutes ago
Description :A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-19190
Published : Aug. 7, 2026, 2:30 a.m. | 1 hour, 39 minutes ago
Description :A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...