CVE-2026-24303Disclosure(microsoft / partner_center)

LOWCVSS 9.6 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.

microsoft CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24303

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

partner_center

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-04-24); latest day: 2
5 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

partner_center

1 version affected across 1 product

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-24	2	Disclosure1General1
2026-04-25	1	Disclosure1
2026-04-27	2	Disclosure2

Full discourse5 posts

kawn@kawn2020165d
Disclosure
#securityupdate #microsoft #定例外 2026. 4.23 Microsoft パートナーセンターの特権昇格の脆弱性 CVE-2026-24303 Security Vulnerability リリース日: - マイクロソフト https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24303
Post summary
The tweet announces the CVE‑2026‑24303 privilege escalation vulnerability in Microsoft Partner Center, linking to Microsoft’s update guide but providing no technical, exploit, or patch details.
10100120
85 followersView on X
kawn@kawn2020165d
Disclosure
#securityupdate #microsoft #定例外 CVE-2026-24303 Security Vulnerability 影響: 特権の昇格最大深刻度: 緊急 CVSS:3.1 9.6 / 8.3 悪用可能性・一般に公開: No ・悪用: No ・Exploitability assessment: 対象外 https://x.com/kawn2020/status/2048670288142061579
Post summary
The tweet announces CVE-2026-24303, a privilege escalation vulnerability with high CVSS scores, but provides no PoC, exploit code, or patch details.
1000073
85 followersView on X
CVE@CVEnew166d
Disclosure
CVE-2026-24303 Improper access control in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network. https://www.cve.org/CVERecord?id=CVE-2026-24303
Post summary
The post announces CVE‑2026‑24303, describing improper access control in Microsoft Partner Center that could allow authorized attackers to elevate privileges across the network.
00000117
57.3K followersView on X
Aakash Rahsi@rahsi_aaka167d
General
CVE-2026-24303 | Microsoft Partner Center Elevation of Privilege Vulnerability https://www.aakashrahsi.online/post/cve-2026-24303 https://t.co/e594oD9QMS
Post summary
The tweet merely announces the existence of CVE‑2026‑24303 with a link to a blog post, lacking any substantive technical details, exploit code, or mitigation information.
0000033
1 followersView on X
Aakash Rahsi@rahsi_aaka167d
Disclosure
CVE-2026-24303 | Microsoft Partner Center Elevation of Privilege Vulnerability https://www.aakashrahsi.online/post/cve-2026-24303 https://t.co/CIDa7Tc2Qu
Post summary
The tweet shares a link to a post about CVE-2026-24303, an elevation‑of‑privilege flaw in Microsoft Partner Center, but does not provide additional technical details, exploit code, or mitigation information.
0000032
1 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	partner_center	-	-	-

Explore more

Back to dashboard microsoft CVEs partner_center vulnerabilities

What researchers are saying

CVE-2026-24303

kawn@kawn2020Disclosure

The tweet announces the CVE‑2026‑24303 privilege escalation vulnerability in Microsoft Partner Center, linking to Microsoft’s update guide but providing no technical, exploit, or patch details.

kawn@kawn2020Disclosure

The tweet announces CVE-2026-24303, a privilege escalation vulnerability with high CVSS scores, but provides no PoC, exploit code, or patch details.

CVE@CVEnewDisclosure

The post announces CVE‑2026‑24303, describing improper access control in Microsoft Partner Center that could allow authorized attackers to elevate privileges across the network.

Aakash Rahsi@rahsi_aakaGeneral

The tweet merely announces the existence of CVE‑2026‑24303 with a link to a blog post, lacking any substantive technical details, exploit code, or mitigation information.

Aakash Rahsi@rahsi_aakaDisclosure

The tweet shares a link to a post about CVE-2026-24303, an elevation‑of‑privilege flaw in Microsoft Partner Center, but does not provide additional technical details, exploit code, or mitigation information.