Common Vulnerabilities and Exposures (CVE)

CVE-2026-59118

Aug 16, 2026 17:16:25 UTC

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-56161

Aug 16, 2026 17:16:25 UTC

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

CVE-2026-62830

Aug 16, 2026 17:16:24 UTC

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

CVE-2026-62917

Aug 16, 2026 17:16:24 UTC

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-62839

Aug 16, 2026 17:16:23 UTC

Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-58639

Aug 16, 2026 17:16:23 UTC

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-62898

Aug 16, 2026 17:16:22 UTC

Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

CVE-2026-62738

Aug 16, 2026 17:16:21 UTC

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-71331

Aug 16, 2026 17:16:21 UTC

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.

CVE-2026-70354

Aug 16, 2026 17:16:20 UTC

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.

CVE-2026-63522

Aug 16, 2026 17:16:20 UTC

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

CVE-2026-70332

Aug 16, 2026 17:16:19 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-70326

Aug 16, 2026 17:16:18 UTC

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

CVE-2026-70306

Aug 16, 2026 17:16:18 UTC

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-70130

Aug 16, 2026 17:16:17 UTC

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.