Office Purview (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-03-19. Vendor: Microsoft.

CVEs of Office Purview

• CVE-2026-26139 - CVSS 8.6 (high), 2026-03-19: Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-26138 - CVSS 10 (critical), 2026-03-19: Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-64676 - CVSS 7.2 (high), 2025-12-18: '.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network.
• CVE-2025-53762 - CVSS 9.9 (critical), 2025-07-18: Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.
• CVE-2025-21385 - CVSS 8.8 (high), 2025-01-09: A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.