CVE-2026-62873

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

Published 6 Aug 2026 • Updated 7 Aug 2026

Severity: CRITICAL

Description

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

Affected products (1)

• Microsoft Microsoft 365 Admin Center

Problem types

• CWE-347: Improper Verification of Cryptographic Signature

References (1)

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62873