DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Office: Mehrere Schwachstellen
view advisory published 2026-08-06
Ein Angreifer kann mehrere Schwachstellen in Microsoft Teams, Microsoft Azure Managed Instance und Microsoft Service Bus ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen oder Daten zu manipulieren.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-65667US | —OT elevated | — | ||
Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62918US | — | — | ||
Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-62896US | — | — | ||
Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62836US | critical10.0 | — | ||
Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-50515US | — | — | ||
Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. | ||||
02
references
External citations — patches, advisories, analysis.
- Microsoft Leitfaden für Sicherheitsupdatesexternal
- Microsoft Security Advisory CVE-2026-50515external
- Microsoft Security Advisory CVE-2026-62836external
- Microsoft Security Advisory CVE-2026-62896external
- Microsoft Security Advisory CVE-2026-62918external
- Microsoft Security Advisory CVE-2026-65667external
- WID-SEC-W-2026-2692 - CSAF Versionself
- WID-SEC-2026-2692 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan