Partner Center (Microsoft) - vulnerabilities (CVEs)

7 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-08. Vendor: Microsoft.

CVEs of Partner Center

• CVE-2026-96207 - CVSS 10 (critical), 2026-10-08: Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-69558 - CVSS 8.6 (high), 2026-08-20: Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.
• CVE-2026-34327 - CVSS 8.2 (high), 2026-05-07: Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-24303 - CVSS 9.6 (critical), 2026-04-23: Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-65041 - CVSS 10 (critical), 2025-12-18: Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.
• CVE-2025-29814 - CVSS 9.3 (critical), 2025-03-21: Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.
• CVE-2024-49035 - CVSS 9.8 (critical), 2024-11-26: An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.