CVE-2026-48584

Critical · CVSS 9.9

Azure Synapse — Execution with Unnecessary Privileges / Privilege Escalation

CVSS: 9.9; nvd
EPSS: 0.50%; 39th pct
KEV: No
Class: other; CWE-250, NVD-CWE-noinfo

Description

Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.

Search profile — drives PoC discovery

Symbols Azure SynapseCWE-250unnecessary privilegesprivilege escalationauthorized attackerelevate privilegesnetwork

Keywords CVE-2026-48584Azure Synapse privilege escalationAzure Synapse unnecessary privilegesAzure Synapse EoPAzure Synapse CWE-250Azure Synapse PoCAzure Synapse exploitSynapse Analytics privilege escalation

Versions: <UNKNOWN>

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48584

Status: enriched · ingested 2026-06-29T18:00:49.000Z · profiled 2026-07-01T18:30:14.000Z