CVE-2026-65668

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

Published 6 Aug 2026 • Updated 7 Aug 2026

Severity: HIGH

Description

Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

Affected products (1)

• Microsoft Microsoft Purview eDiscovery

Problem types

• CWE-284: Improper Access Control

References (1)

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65668