CVE-2026-94510PATCHED

Microsoft · Microsoft Bookings

Microsoft Bookings Elevation of Privilege Vulnerability

Description

Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Vendor	Product	Versions
Microsoft	Microsoft Bookings	-

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94510(vendor-advisory, patch)

Related News (3 articles)

Tier C

Cisco Talos1h ago

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

→ No new info (linked only)

Tier C

VulDB4d ago

CVE-2026-94510 | Microsoft Bookings authorization

→ No new info (linked only)

Tier A

Microsoft MSRC5d ago

CVE-2026-94510 Microsoft Bookings Elevation of Privilege Vulnerability

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.9 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-94510

CWECWE-639

PublishedOct 8, 2026

Last enriched5d ago

Trending Score60

Source articles3

Independent3

Info Completeness7/14

Missing: title, description, epss, kev, exploit, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV

Windows Shell Security Feature Bypass Vulnerability

Trending: 131

HIGHCVE-2026-81963EXPKEV

Windows Update Stack Elevation of Privilege Vulnerability

Trending: 81

HIGHCVE-2026-85880EXPKEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Trending: 81

CRITICALCVE-2026-88131

Microsoft Dataverse Remote Code Execution Vulnerability

Trending: 64

CRITICALCVE-2026-77900

Azure App Service Remote Code Execution Vulnerability

Trending: 64

Pin to Dashboard

Verification

State: verified

Confidence: 0%

Vulnerability Timeline

CVE Published

Oct 8, 2026

Discovered by ZDM

Oct 8, 2026

Patch Available

Oct 13, 2026