Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5022 articles · 188920 vulns · 37/41 feeds (7d)
← Back to list
9.9
CVE-2026-59115PATCHED
microsoft · entra_provisioning_service

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

Description

'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

Affected Products

VendorProductVersions
microsoftentra_provisioning_service-

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftentracert_advisory90%
microsoftazurecert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115(vendor-advisory, patch)

Related News (6 articles)

Tier B
BSI Advisories7h ago
[NEU] [hoch] Microsoft Azure und Entra ID: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
CrowdStrike Blog1d ago
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs
→ No new info (linked only)
Tier D
The Hacker News2d ago
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
→ No new info (linked only)
Tier B
BSI Advisories5d ago
[NEU] [hoch] Microsoft Azure: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB5d ago
CVE-2026-59115 | Microsoft Entra Provisioning Service improper authorization
→ No new info (linked only)
Tier A
Microsoft MSRC6d ago
CVE-2026-59115 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
→ No new info (linked only)
CVSS 3.19.9 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-59115
CWECWE-35
PublishedAug 6, 2026
Last enriched5d ago
Trending Score57
Source articles6
Independent5
Info Completeness7/14
Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-68820EXPKEV
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Trending: 156
CRITICALCVE-2026-55040EXPKEV
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Trending: 154
HIGHCVE-2026-45659EXPKEV
Microsoft SharePoint Remote Code Execution Vulnerability
Trending: 154
HIGHCVE-2026-50656EXP
Microsoft Defender Elevation of Privilege Vulnerability
Trending: 98
CRITICALCVE-2026-50522EXPKEV
Microsoft SharePoint Remote Code Execution Vulnerability
Trending: 76

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 6, 2026
Discovered by ZDM
Aug 6, 2026
Patch Available
Aug 12, 2026