CVE-2026-62873

Microsoft · Published August 6, 2026

9.8

CVSS v3.1

CRITICAL

Patch availableGet patch

Description

Microsoft 365 Admin Center Elevation of Privilege Vulnerability. Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Microsoft 365 Admin Center

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C