Microsoft Apps: Mehrere Schwachstellen ermöglichen Privilegieneskalation
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Microsoft Authenticator und Microsoft Xbox Gaming Services ausnutzen, um seine Privilegien zu erhöhen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Highbsi:WID-SEC-2026-32412 linked CVEs
Open advisory with all CVEs
More on Microsoft
Other advisories
- HighCVE-2026-85898Microsoft Edge (Chromium-based): Type-Confusion
- HighCVE-2026-85898Microsoft Edge (Chromium-based): Type-Confusion
- HighCVE-2026-83831Microsoft Edge (Chromium-based): Double-Free
- HighCVE-2026-83831Microsoft Edge (Chromium-based): Double-Free
- MediumCVE-2025-64394Veeam Backup for Microsoft 365: Denial of Service
- MediumCVE-2025-64394Veeam Backup for Microsoft 365: Denial of Service
- MediumCVE-2026-106078Veeam Backup for Microsoft 365: unzureichende Prüfung kryptografischer Signaturen
- MediumCVE-2026-106078Veeam Backup for Microsoft 365: unzureichende Prüfung kryptografischer Signaturen
Other news entries
- Microsoft releases Windows OOB updates to distrust eMudhra certificatesNewsBleepingComputer
- The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses HardestNewsBleepingComputer
- Node2Shell puts Microsoft and Node.js on Brotli patch dutyNewsCSO Online
- Microsoft releases out-of-band Windows fixes with certificate updatesNewsThe Register — Security
- Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account TokensNewsThe Hacker News
- Multiples vulnérabilités dans Microsoft Edge (27 octobre 2026)NewsCERT-FR (ANSSI)
- Microsoft releases emergency .NET security fixes for Google Brotli bugNewsThe Register — Security
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and RansomwareNewsThe Hacker News
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3241
ID