Product:
ACI Confidential Containers
Summary
Microsoft ACI Confidential Containers has a vulnerability that allows for elevation of privilege. This issue can lead to unauthorized access and manipulation of sensitive data. The vulnerability is characterized by high impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-26124 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges on the local system. Once they gain access, they can manipulate the system to elevate their privileges further, potentially leading to unauthorized access to confidential information and system resources.
Affected Products
- ACI Confidential Containers: A service that allows users to run confidential applications in a secure environment.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, users should review their access controls and ensure that only authorized personnel have high privileges on the system.