Protecting Privacy Build Trust

Protecting Privacy Build Trust

Protecting Privacy Build Trust

Privacy Trust

on July 2, 2026 at 2:00 pm — CVE-2026-50521 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.

on July 2, 2026 at 2:00 pm — CVE-2026-50521 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Read More »

on July 2, 2026 at 2:00 pm — CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

on July 2, 2026 at 2:00 pm — CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability Read More »

on July 2, 2026 at 2:00 pm — CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.

on July 2, 2026 at 2:00 pm — CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability Read More »

on July 2, 2026 at 2:00 pm — CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.

on July 2, 2026 at 2:00 pm — CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability Read More »

on July 2, 2026 at 2:00 pm — CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Url redirection to untrusted site (‘open redirect’) in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

on July 2, 2026 at 2:00 pm — CVE-2026-41106 Microsoft 365 Copilot Elevation of Privilege Vulnerability Read More »

on July 1, 2026 at 8:40 am — CVE-2026-57062 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Information published.

on July 1, 2026 at 8:40 am — CVE-2026-57062 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182. Read More »

on July 1, 2026 at 8:01 am — CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Information published.

on July 1, 2026 at 8:01 am — CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability Read More »

on July 1, 2026 at 8:01 am — CVE-2026-48779 ws: Memory exhaustion DoS from tiny fragments and data chunks

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Information published.

on July 1, 2026 at 8:01 am — CVE-2026-48779 ws: Memory exhaustion DoS from tiny fragments and data chunks Read More »

on June 30, 2026 at 2:00 pm — CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Updated an acknowledgement. This is an informational change only.

on June 30, 2026 at 2:00 pm — CVE-2026-42910 Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability Read More »

on June 30, 2026 at 8:01 am — CVE-2026-54371 attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr

Leave a Comment / Threats & Vulnerabilities / Privacy Trust

Information published.

on June 30, 2026 at 8:01 am — CVE-2026-54371 attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr Read More »