Cert-In-Advisories

[CIVN-2026-0376] Multiple Vulnerabilities in Microsoft Products

By TeamwinPublished On: July 23, 2026

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Microsoft Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: CRITICAL

Software Affected

Dynamics 365 Customer Voice

Microsoft 365 Copilot

Microsoft Exchange Online

Azure Synapse

Microsoft Dynamics 365

Azure AI Bot Service

Microsoft Edge (Chromium-based)

Microsoft Cost Management

Overview

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to perform spoofing, elevate privilege, perform tampering and disclose sensitive information on the targeted system.

Target Audience:

All end-user organizations and individuals using Microsoft Products.

Risk Assessment:

High risk of privilege escalation, spoofing, sensitive information disclosure.

Impact Assessment:

Potential for privilege escalation, spoofing, sensitive information disclosure and/or compromise of system.

Description

Multiple vulnerabilities have been reported in Microsoft Products due to improper neutralization of input during web page generation, URL redirection to untrusted site, missing authorization, execution with unnecessary privileges, improper access control, improper authentication, exposure of sensitive information, and improper neutralization of special elements in command. An attacker could exploit these vulnerabilities to perform spoofing, elevate privileges, perform tampering or disclose information over a network on the targeted system.

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, access sensitive information, elevate privileges, perform tampering over a network and/or perform spoofing on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47646

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47645

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48582

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48584

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47647

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42895

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32174

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32208

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47633

Vendor Information

Microsoft

https://www.microsoft.com/

References