CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2026-65668: Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

highCVSS 8.8CVE-2026-65668
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

CSIRTS triage

vendor: Microsoftproduct: Microsoft Purview eDiscoveryPrivilege escalation
What
Improper access control allows authorized attackers to elevate privileges over the network.
Who is affected
Deployments of Microsoft Purview eDiscovery are affected.
Urgency
High severity (CVSS 8.8); not yet exploited but requires timely patching.
Action
Apply the latest security update from Microsoft for Purview eDiscovery.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Microsoft Purview eDiscovery

Get an email when a new Microsoft Purview eDiscovery advisory drops — max one per day, one-click unsubscribe.

Details

Source
Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity
high — CVSS 8.8
Published
2026-08-06
Exploitation
Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65668

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-65668coverage & exploitation statusNVD · CVE.org

More from Microsoft Security Response Center