CVE-2026-65668— Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Possible ATT&CK Techniques 1AI
T1133 · External Remote ServicesGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-65668
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft Purview eDiscovery | - | - |
II. Public POCs for CVE-2026-65668
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-65668
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-65668 (1)
Same Patch Batch · Microsoft · 2026-08-06 · 17 CVEs total
| CVE-2026-65667 | 10.0 CRITICAL | Microsoft Teams Elevation of Privilege Vulnerability |
| CVE-2026-56162 | 10.0 CRITICAL | Azure SQL Database Elevation of Privilege Vulnerability |
| CVE-2026-63508 | 10.0 CRITICAL | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability |
| CVE-2026-50481 | 9.9 CRITICAL | Azure Active Directory Elevation of Privilege Vulnerability |
| CVE-2026-59115 | 9.9 CRITICAL | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability |
| CVE-2026-62830 | 9.9 CRITICAL | Azure SRE Agent Elevation of Privilege Vulnerability |
| CVE-2026-50515 | 9.9 CRITICAL | Azure Service Bus Remote Code Execution Vulnerability |
| CVE-2026-62873 | 9.8 CRITICAL | Microsoft 365 Admin Center Elevation of Privilege Vulnerability |
| CVE-2026-62896 | 9.6 CRITICAL | Microsoft Teams Elevation of Privilege Vulnerability |
| CVE-2026-56161 | 9.6 CRITICAL | Azure Logic Apps Information Disclosure Vulnerability |
| CVE-2026-70332 | 9.6 CRITICAL | Microsoft Office SharePoint Spoofing Vulnerability |
| CVE-2026-59118 | 9.3 CRITICAL | Microsoft Power Apps Elevation of Privilege Vulnerability |
| CVE-2026-68823 | 9.1 CRITICAL | Azure Confidential Ledger Remote Code Execution Vulnerability |
| CVE-2026-49163 | 8.8 HIGH | Application Insights Profiler Elevation of Privilege Vulnerability |
| CVE-2026-62836 | 8.7 HIGH | Azure SQL Managed Instance Elevation of Privilege Vulnerability |
| CVE-2026-62918 | 7.5 HIGH | Microsoft Teams Spoofing Vulnerability |
IV. Related Vulnerabilities
Same vendor: Microsoft
- CVE-2026-70332
Microsoft Office SharePoint Spoofing Vulnerability - CVE-2026-62873
Microsoft 365 Admin Center Elevation of Privilege Vulnerabil - CVE-2026-63508
Microsoft Planetary Computer Pro Elevation of Privilege Vuln - CVE-2026-50515
Azure Service Bus Remote Code Execution Vulnerability - CVE-2026-65667
Microsoft Teams Elevation of Privilege Vulnerability
Same weakness: CWE-284
- CVE-2026-56161
Azure Logic Apps Information Disclosure Vulnerability - CVE-2025-14561
Access Control Bypass via Publisher REST APIs in Multiple WS - CVE-2026-18993
NousResearch hermes-agent Memory Toolset model_tools.py acce - CVE-2026-10547
Langflow OSS is affected by arbitrary code execution in cust - CVE-2026-70612
Electron: Sandboxed iframes can launch external protocol han
V. Comments for CVE-2026-65668
No comments yet