Cert-In-Advisories

[CIVN-2026-0403] Multiple Vulnerabilities in Microsoft Products

By TeamwinPublished On: August 11, 2026

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Microsoft Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: CRITICAL

Software Affected

Azure SQL Managed Instance

Microsoft Teams

Microsoft Purview eDiscovery

Microsoft Power Apps

Azure Active Directory

Microsoft Entra Provisioning Service

Microsoft Application Insights Profiler

Azure Confidential Ledger

Azure Logic Apps

Azure SRE Agent

Azure SQL Database

Azure Service Bus

Microsoft Planetary Computer Pro

Microsoft 365 Admin Center

Microsoft Office SharePoint

Overview

Multiple vulnerabilities have been reported in Microsoft Products, which could allow an attacker to perform spoofing, elevate privilege, perform tampering and disclose sensitive information on the targeted system.

Target Audience:

All end-user organizations and individuals using the Microsoft Products.

Risk Assessment:

High risk of privilege escalation, spoofing, sensitive information disclosure.

Impact Assessment:

High impact on Confidentiality, Integrity and Availability of the affected systems.

Description

Multiple vulnerabilities have been reported in Microsoft Products due to broken authorization/authentication controls, improper access control, modification of data assumed to be immutable, unsafe exposure of privileged functionality, or inadequate path handling.

An attacker could exploit these vulnerabilities by sending crafted network requests, abusing authentication or authorization weaknesses, manipulating paths or resource handling and invoking exposed privileged functionality.

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to protected information, privilege escalation and remote code execution.

Solution

Apply appropriate updates as mentioned by the vendor:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62836

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62896

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65668

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59118

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50481

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62918

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49163

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68823

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56161

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62830

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65667

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56162

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50515

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63508

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70332

Vendor Information

Micosoft

https://www.microsoft.com/

References