cloud vulnerability management

Microsoft has listed CVE-2026-54998 as a Microsoft Exchange Online elevation-of-privilege vulnerability in the Security Update Guide, framing it as a cloud-service issue where Microsoft’s own remediation and disclosure signals matter more than any patch an Exchange administrator can manually...

On July 2, 2026, Microsoft published CVE-2026-45499, a critical Azure OpenAI elevation-of-privilege vulnerability caused by server-side request forgery, saying the cloud-service flaw had already been fully mitigated and required no customer action. That last clause is the story’s hinge, not its...

Microsoft lists CVE-2026-42826 as an Azure DevOps information disclosure vulnerability in its Security Update Guide, with the user-highlighted CVSS “Report Confidence” metric explaining how certain the industry should be that the flaw exists and that its technical description is credible. That...