Skip to content
Threat Feed
Subscribe

Tag

Elevation-of-Privilege

4 briefs RSS
high advisory

Microsoft.AspNetCore.Authentication.Negotiate Elevation of Privilege Vulnerability

An elevation of privilege vulnerability in the Microsoft.AspNetCore.Authentication.Negotiate package allows an attacker to misassociate an authenticated identity with an unintended LDAP principal due to improper validation of Kerberos principal SIDs.

Microsoft.AspNetCore.Authentication.Negotiate +2 vulnerability elevation-of-privilege dotnet
1t 1c
high advisory

CVE-2026-57106 Microsoft Data Quality Elevation of Privilege Vulnerability

CVE-2026-57106 describes a server-side request forgery (SSRF) vulnerability in Microsoft Data Quality that allows an unauthorized attacker to elevate privileges over a network.

Data Quality cve vulnerability ssrf elevation-of-privilege
1t
critical threat

Microsoft Addresses Two Actively Exploited Zero-Day Vulnerabilities in July 2026 Patch Tuesday

Microsoft's July 2026 Patch Tuesday addressed 622 vulnerabilities, including two actively exploited zero-day elevation of privilege flaws, CVE-2026-56155 in Active Directory Federation Services and CVE-2026-56164 in SharePoint, allowing local and remote attackers to gain administrative control.

exploited PoC Active Directory Federation Services +23 patch-tuesday zero-day vulnerability microsoft windows sharepoint active-directory-federation-services bitlocker +2
8t 4c 8i updated
high advisory

CVE-2026-32223 Windows USB Printing Stack Elevation of Privilege Vulnerability

CVE-2026-32223 is an elevation of privilege vulnerability affecting the Windows USB Printing Stack (usbprint.sys), potentially allowing a local attacker to gain elevated privileges on a vulnerable system.

cve-2026-32223 elevation-of-privilege windows
2r 1t 1c