Common Vulnerabilities and Exposures (CVE)

CVE-2026-68823

Aug 16, 2026 18:48:35 UTC

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

CVE-2026-49163

Aug 16, 2026 18:48:34 UTC

Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.

CVE-2026-65667

Aug 16, 2026 18:48:34 UTC

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-56162

Aug 16, 2026 18:48:33 UTC

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-50516

Aug 16, 2026 18:48:33 UTC

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-59118

Aug 16, 2026 18:48:32 UTC

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-56161

Aug 16, 2026 18:48:32 UTC

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

CVE-2026-62830

Aug 16, 2026 18:48:31 UTC

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

CVE-2026-62917

Aug 16, 2026 18:48:30 UTC

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-62839

Aug 16, 2026 18:48:30 UTC

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-58639

Aug 16, 2026 18:48:29 UTC

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-65767

Aug 16, 2026 18:48:29 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.

CVE-2026-62898

Aug 16, 2026 18:48:28 UTC

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

CVE-2026-62738

Aug 16, 2026 18:48:28 UTC

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-71331

Aug 16, 2026 18:48:27 UTC

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.