Cert-In-Advisories

[CIVN-2026-0273] Multiple Vulnerabilities in Microsoft Products

By TeamwinPublished On: May 29, 2026

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Microsoft Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

Microsoft Global Secure Access (GSA)

Microsoft Entra ID

Microsoft Planetary Computer Pro (GeoCatalog)

Azure Stack HCI

Microsoft 365 Copilot for iOS

Microsoft 365 Copilot

Azure Resource Manager

Azure Virtual Network Gateway

Azure Privileged Identity Management (PIM)

Microsoft Power Pages

Azure Orbital Spatio

Overview

Multiple vulnerabilities have been reported in Microsoft Products which could allow attacker to execute arbitrary code, input validation, elevate privileges, disclose sensitive information or cause denial of services on the affected systems.

Target Audience:

All organizations and individuals using affected Microsoft products.

Risk Assessment:

High risk due to the potential for remote code execution and command injection and disruption of cloud services.

Impact Assessment:

Data exposure, service compromise, unauthorized privilege escalation, remote code execution and system compromise.

Description

These vulnerabilities exist Microsoft Products and identity services due to improper input validation, authentication weaknesses, authorization issues, and command handling flaws.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, elevate privileges, disclose sensitive information or cause denial of services on the affected systems.

Solution

Apply appropriate updates as mentioned by the vendor:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23663

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42901

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41104

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33843

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26147

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41090

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42827

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47280

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40411

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35430

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23652

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40412

Vendor Information

https://www.microsoft.com/en-in/

References