Partner Center vulnerabilities

2 known vulnerabilities in Partner Center from Microsoft. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Microsoft Partner Center: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2026-34327May 7, 2026Microsoft

  Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized attacker to perform spoofing over a network.

• 9.8 Critical severity

  Microsoft Partner Center Improper Access Control Exploited

  CVE-2024-49035Nov 26, 2024MicrosoftEPSS 1.38%

  An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.