CVE-2026-121668

HighCVSS 7.7/10Last modified Nov 11, 2026

Description

Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Weakness enumeration

CWE-862

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1216696.1Insufficiently protected credentials in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.CVE-2026-121677.8The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to access privileged driver funCVE-2026-1216707.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized aCVE-2026-1216717.0Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.CVE-2026-1216737.8Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1216746.1Insertion of sensitive information into sent data in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over CVE-2026-1216756.1Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over aCVE-2026-1216776.5Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2026-1216785.3Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2026-121687.8An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to escalate privileges to SYCVE-2026-1216807.5Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a networCVE-2026-1216817.8Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
CVE-2026-121668: High severity, CVSS 7.7 | Vulnix