> CVE-2026-45644 Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability
[DATE: 09/06/2026 14:00]
[LANGUAGE: EN]
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Live Share Canvas SDK allows an authorized attacker to elevate privileges over a network.