WAF - WAF Release - 2026-08-07
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2026-64638
CVE-2026-64638
Weekly briefing
Week 32 · 3 Aug – 9 Aug 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
34 source records · 20 groupsSecuritySentinel2 source records
Security news · 2 entries
- AI-powered playbook generator, now available to more customers
Security news · Microsoft Sentinel Blog
- Public Preview: Nested API Support Comes to Microsoft Sentinel CCF
Security news · Microsoft Sentinel Blog
SecurityAzure / Azure Kubernetes Service
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-50516
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityAzure / Microsoft 365 Apps2 source records
Published vulnerability · 2 entries
- Azure SQL Managed Instance Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-62836
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Service Bus Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-50515
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityAzure / Microsoft Entra3 source records
Published vulnerability · 3 entries
- Azure Active Directory Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-50481
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Entra ID Spoofing Vulnerability
Published vulnerability
CVE-2026-62869
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-59115
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityAzure / Purview
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-65668
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityAzure7 source records
Published vulnerability · 7 entries
- Application Insights Profiler Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-49163
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Confidential Ledger Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-68823
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure Logic Apps Information Disclosure Vulnerability
Published vulnerability
CVE-2026-56161
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
Show the other 4 entries
- Azure SQL Database Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-56162
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure SQL Database Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-63522
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Azure SRE Agent Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-62830
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Microsoft 365 Admin Center Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-62873
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityCopilot Cowork Elevation of Privilege Vulnerability
Copilot Cowork Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-59118
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityMicrosoft 365 Apps / SharePoint
Microsoft Office SharePoint Spoofing Vulnerability
Published vulnerability
CVE-2026-70332
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityMicrosoft 365 Apps / Teams3 source records
Published vulnerability · 3 entries
- Microsoft Teams Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-62896
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Microsoft Teams Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-65667
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
- Microsoft Teams Spoofing Vulnerability
Published vulnerability
CVE-2026-62918
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
SecurityMicrosoft Planetary Computer Pro Elevation of Privilege Vulnerability
Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-63508
Assessment context
Fixed by Microsoft in the service; nothing to deploy · Microsoft rates the vulnerability Critical
Message CenterDefender
MC1431377: Microsoft Defender for Office 365: AIR Investigation Experience Improvements
Notice updated · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
SecurityGitLab
GitLab Patch Release: 18.11.9
Security advisory · GitLab patch releases
SecurityDefender
Monthly News-August 2026
Security news · Microsoft Defender XDR Blog
SecuritySentinel
Building a CCF Nested API Pull Connector: A Technical Lab Walkthrough
Security news · Microsoft Sentinel Blog
SecurityCloudflare
WAF - WAF Release - 2026-08-04
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2026-50522, CVE-2026-66066
CVE-2026-50522CVE-2026-66066
Updates and guidanceDefender
Defender for Endpoint iOS 1.1.79210103
Product news · Defender for Endpoint iOS releases
RoadmapDefender
Microsoft Defender for Office 365: Localized Default Mark and Notify Email Template
Roadmap entry · Microsoft 365 Roadmap · Microsoft 365 Message Center Archive by Merill Fernando
SecurityDefender
Microsoft Defender for Cloud Customer Newsletter
Security news · Microsoft Defender for Cloud Blog
SecurityMicrosoft Security Community Blog3 source records
Security news · 3 entries
- From AI Experiments to Digital Workforce: Do Enterprises Need a Chief Agent Officer?
Security news · Microsoft Security Community Blog
- Secure by default: Trusted Launch as Default is now Generally Available
Security news · Microsoft Security Community Blog
- Why AI Agents May Require a New Security Operations Model
Security news · Microsoft Security Community Blog
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.