CVE-2026-83941

CRITICAL9.9

Published 2026-09-08 · Updated 2026-09-08 · Source secure@microsoft.com

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

CWE-862

Same severity, most recent

CVE-2026-81376
Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
2026-09-08 · score 9.6
CVE-2026-78510
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
2026-09-08 · score 9.8
CVE-2026-78509
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
2026-09-08 · score 9.8
CVE-2026-78445
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
2026-09-08 · score 9.8
CVE-2026-77493
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
2026-09-08 · score 9.8