CVE-2026-50515 - Azure Service Bus Remote Code Execution Vulnerability
CVE ID :CVE-2026-50515
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-50515
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-56161 - Azure Logic Apps Information Disclosure Vulnerability
CVE ID :CVE-2026-56161
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-56161
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-56162 - Azure SQL Database Elevation of Privilege Vulnerability
CVE ID :CVE-2026-56162
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-56162
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-59115 - Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CVE ID :CVE-2026-59115
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-59115
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-59118 - Microsoft Power Apps Elevation of Privilege Vulnerability
CVE ID :CVE-2026-59118
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-59118
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62830 - Azure SRE Agent Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62830
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62830
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62836 - Azure SQL Managed Instance Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62836
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62836
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62873 - Microsoft 365 Admin Center Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62873
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62873
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62896 - Microsoft Teams Elevation of Privilege Vulnerability
CVE ID :CVE-2026-62896
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62896
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-62918 - Microsoft Teams Spoofing Vulnerability
CVE ID :CVE-2026-62918
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-62918
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-63508 - Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
CVE ID :CVE-2026-63508
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-63508
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65667 - Microsoft Teams Elevation of Privilege Vulnerability
CVE ID :CVE-2026-65667
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-65667
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-65668 - Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
CVE ID :CVE-2026-65668
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-65668
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-68823 - Azure Confidential Ledger Remote Code Execution Vulnerability
CVE ID :CVE-2026-68823
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-68823
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-70332 - Microsoft Office SharePoint Spoofing Vulnerability
CVE ID :CVE-2026-70332
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-70332
Published : Aug. 7, 2026, 12:16 a.m. | 3 hours, 53 minutes ago
Description :Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Severity: 9.6 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-19190 - StableBit Scanner ScannerService Scanner.Service.exe permission
CVE ID :CVE-2026-19190
Published : Aug. 7, 2026, 2:30 a.m. | 1 hour, 39 minutes ago
Description :A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-19190
Published : Aug. 7, 2026, 2:30 a.m. | 1 hour, 39 minutes ago
Description :A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner\Service\Scanner.Service.exe of the component ScannerService. This manipulation causes permission issues. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-19189 - Power Sofware PowerISO Kernel Driver scdemu.sys privileges management
CVE ID :CVE-2026-19189
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys of the component Kernel Driver. The manipulation results in improper privilege management. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-19189
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys of the component Kernel Driver. The manipulation results in improper privilege management. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: 7.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-45198 - GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
CVE ID :CVE-2026-45198
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-45198
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-45204 - GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory
CVE ID :CVE-2026-45204
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions, platform instability and denial of service.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-45204
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions, platform instability and denial of service.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-49746 - GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
CVE ID :CVE-2026-49746
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-49746
Published : Aug. 7, 2026, 3:16 a.m. | 53 minutes ago
Description :Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-14331 - Subscribe2 < 10.46 - Reflected XSS via email Parameter
CVE ID :CVE-2026-14331
Published : Aug. 7, 2026, 6:16 a.m. | 1 hour, 54 minutes ago
Description :The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-14331
Published : Aug. 7, 2026, 6:16 a.m. | 1 hour, 54 minutes ago
Description :The Subscribe2 WordPress plugin before 10.46 does not properly escape a user-supplied value before reflecting it into a public subscription form, leading to Reflected Cross-Site Scripting that executes in the browser of an unauthenticated visitor who interacts with the form through a crafted link.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...