Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network.

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Acknowledgement Updated

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

Acknowledgement Updated

Updated an acknowledgement. This is an informational change only.

Updated an acknowledgement. This is an informational change only.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

Updated an acknowledgement. This is an informational change only.

Corrected Build Number in the Security Updates table. This is an informational change only.

Change the name of the affected software from **Microsoft Power Apps** to **Microsoft Power Apps Desktop Client**. This is an informational change only.

Updated an acknowledgement. This is an informational change only.