Vulnerability index

Browse CVEs

54 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper AuthorizationCWE-285 × clear
Power Apps CRITICAL 9.3
CVE-2026-59118

Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.

No fix yet
Fix from $2,300 2026-08-07
Azure Portal HIGH 7.5
CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.

No fix yet
Fix from $1,950 2026-07-24
Azure Red Hat Openshift CRITICAL 9.9
CVE-2026-56160

Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.

No fix yet
Fix from $2,300 2026-07-24
Windows 10 1607 HIGH 7.8
CVE-2026-58540

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Sharepoint Server HIGH 8.8
CVE-2026-58277

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Mitigation only
Fix from $1,950 2026-07-14
Windows 10 1607 HIGH 8.8
CVE-2026-54121

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-50344

Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows 10 1607 HIGH 7.8
CVE-2026-50346

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.9339 / 10.0.17763.9020+
Fix from $1,950 2026-07-14
Windows Admin Center HIGH 7.8
CVE-2026-58631

Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.

Fix: 2606+
Fix from $1,950 2026-07-14
Windows 10 1809 HIGH 7.8
CVE-2026-49170

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Fix: 10.0.17763.9020 / 10.0.19044.7548+
Fix from $1,950 2026-07-14
Edge Chromium HIGH 8.3
CVE-2026-58284

Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Fix: 150.0.4078.48+
Fix from $1,950 2026-07-03
Edge Chromium CRITICAL 10.0
CVE-2026-57983

Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Fix: 150.0.4078.48+
Fix from $2,300 2026-07-03
Sharepoint Server HIGH 8.0
CVE-2026-47298

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.19725.20384+
Fix from $1,950 2026-06-09
Exchange Server MEDIUM 6.5
CVE-2026-45503

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

Fix: 15.02.2562.043+
Fix from $1,600 2026-06-09
.net HIGH 7.8
CVE-2026-45490

Improper authorization in .NET allows an authorized attacker to elevate privileges locally.

Fix: 8.0.28 / 9.0.17+
Fix from $1,950 2026-06-09
Powertoys HIGH 7.8
CVE-2026-42902

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.

Fix: 0.99.1+
Fix from $1,950 2026-06-09
Exchange Online HIGH 7.5
CVE-2026-48579

Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.

Mitigation only
Fix from $1,950 2026-06-04
Teams MEDIUM 6.5
CVE-2026-33823

Improper authorization in Microsoft Teams allows an authorized attacker to disclose information over a network.

No fix yet
Fix from $1,600 2026-05-07
Windows Server 2012 HIGH 8.0
CVE-2026-27912

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

Fix: 10.0.14393.9060 / 10.0.17763.8644+
Fix from $1,950 2026-04-14
Azure Kubernetes Service CRITICAL 9.8
CVE-2026-33105

Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2026-04-03
Azure Ai Foundry CRITICAL 9.8
CVE-2026-32213

Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2026-04-03
Entra Id CRITICAL 9.8
CVE-2026-24305

Azure Entra ID Elevation of Privilege Vulnerability

No fix yet
Fix from $2,300 2026-01-22
Power Apps HIGH 8.0
CVE-2026-20960

Improper authorization in Microsoft Power Apps allows an authorized attacker to execute code over a network.

Fix: 3.25121+
Fix from $1,950 2026-01-16
Partner Center CRITICAL 9.8
CVE-2025-65041

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2025-12-18
Dynamics Omnichannel Sdk Storage Containers CRITICAL 9.8
CVE-2025-64655

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.

No fix yet
Fix from $2,300 2025-11-20
Azure Cache For Redis HIGH 8.7
CVE-2025-59271

Redis Enterprise Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2025-10-09
Pc Manager CRITICAL 9.8
CVE-2025-53795

Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2025-08-21
Azure Portal CRITICAL 9.1
CVE-2025-53792

Azure Portal Elevation of Privilege Vulnerability

No fix yet
Fix from $2,300 2025-08-07
Azure Machine Learning HIGH 8.8
CVE-2025-49746

Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

Mitigation only
Fix from $1,950 2025-07-18
Sharepoint Server HIGH 8.8
CVE-2025-49701

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Fix: 16.0.18526.20424+
Fix from $1,950 2025-07-08