Security Vulnerabilities
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.9
EPSS Score
0.005
Published
2026-08-07
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
8.7
EPSS Score
0.004
Published
2026-08-07
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.9
EPSS Score
0.008
Published
2026-08-07
Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
9.3
EPSS Score
0.005
Published
2026-08-07
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.011
Published
2026-08-07
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.
CVSS Score
9.6
EPSS Score
0.005
Published
2026-08-07
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-08-07
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.008
Published
2026-08-07
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.9
EPSS Score
0.006
Published
2026-08-07
CVE-2026-65400
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials.
Known exploited
CVSS Score
9.8
EPSS Score
0.099
Published
2026-08-06