CVE-2026-48579

Same vendor

• CVE-2026-48567 — Authentication bypass by spoofing in Azure HorizonDB allows an unauthorized attacker to elevate privileges over a network (10.0 CRITICAL)
• CVE-2026-47644 — Improper neutralization of special elements in output used by a downstream component ('injection') in Copilot Chat (Microsoft Edge) allow... (6.5 MEDIUM)
• CVE-2026-45497 — Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an authorized attacker to... (7.7 HIGH)
• CVE-2026-42824 — Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to di... (6.5 MEDIUM)
• CVE-2026-47294 — Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network (8.0 HIGH)

Same CWE

• CVE-2026-47298 — Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network (8.0 HIGH)
• CVE-2026-45503 — Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network (8.1 HIGH)
• CVE-2026-45490 — Improper authorization in .NET allows an authorized attacker to elevate privileges locally (7.8 HIGH)
• CVE-2026-42902 — Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally (7.8 HIGH)
• CVE-2026-11619 — A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2 (6.3 MEDIUM)