Cert-In-Advisories

[CIVN-2026-0448] Multiple vulnerabilities in Microsoft Products

By TeamwinPublished On: September 10, 2026

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple vulnerabilities in Microsoft Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: CRITICAL

Systems Affected

Azure Data Manager for Energy

Azure SQL Database

Azure Data Factory

Microsoft Office Word

Microsoft Office 365

Microsoft Office LTSC

Microsoft 365 Apps

Microsoft Copilot in Azure

Azure Virtual Machines

Microsoft Partner Center

Azure ARC

Azure Logic Apps

Azure Web Apps

Microsoft Fabric

Azure Managed Instance for Apache Cassandra

Windows Remote Help

Microsoft Entra ID

Overview

Multiple vulnerabilities have been reported in Microsoft products which could allow an unauthenticated, remote attacker to elevate privileges, execute arbitrary code, disclose sensitive information, perform spoofing or cause denial of services on the affected systems.

Target Audience:

All organizations and individuals using affected Microsoft products.

Risk Assessment:

High risk of remote code execution, service disruption and sensitive information disclosure on the underlying system.

Impact Assessment:

High impact on Confidentiality, Integrity and Availability of the system.

Description

These vulnerabilities exist in the Microsoft products due to improper input validation, access control weakness or incorrect name resolution. An attacker could exploit these vulnerabilities by sending crafted inputs to the affected systems.

Successful exploitation of these vulnerabilities could allow an attacker to elevate privileges, execute arbitrary code, disclose sensitive information, perform spoofing or cause denial of services on the affected systems.

Solution

Apply appropriate updates as mentioned by the vendor:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69502

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69419

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68782

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66800

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70105

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69855

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69543

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69558

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69555

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69400

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66309

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65816

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-63509

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65770

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55013

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55015

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69836

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69851

Vendor Information

Microsoft

https://www.microsoft.com/en-in

References