KLA90984 Multiple vulnerabilities in Microsoft Azure

🗓️ 14 Apr 2026 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 8 Views

Remote privilege escalation flaws in Azure HPC Pack, Monitor Agent, and Logic Apps require updates.

Reporter	Title	Published	Views	Family All 67
ATTACKERKB	CVE-2026-26149	14 Apr 202616:56	–	attackerkb
ATTACKERKB	CVE-2026-32184	14 Apr 202616:57	–	attackerkb
ATTACKERKB	CVE-2026-32168	14 Apr 202616:57	–	attackerkb
ATTACKERKB	CVE-2026-32171	14 Apr 202616:58	–	attackerkb
ATTACKERKB	CVE-2026-32192	14 Apr 202616:57	–	attackerkb
BDU FSTEC	The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps exposes operating systems running on Windows to exploitation. This allows attackers to escalate their privileges.	16 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, stems from deficiencies in the deserialization mechanism. This allows attackers to exploit their privileges.	16 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Power Apps development environment, related to the lack of measures to neutralize specific elements, allows a perpetrator to circumvent security restrictions.	16 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, stems from insufficient validation of input data. This allows attackers to exploit this flaw to increase their privileges.	16 Apr 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft HPC Pack, a high-performance computing tool, related to deserialization mechanism flaws, allows attackers to escalate their privileges.	16 Apr 202600:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32184
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32168
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32192
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32171
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26149
threats	www.threats.kaspersky.com/en/product/Microsoft-Azure/
threats	www.threats.kaspersky.com/en/product/Microsoft-HPC-Pack/
threats	www.threats.kaspersky.com/en/product/Azure-Monitor/
threats	www.threats.kaspersky.com/en/product/Azure-Monitor-Agent/
statistics	www.statistics.securelist.com/

28 Apr 2026 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.19

EPSS0.01928

SSVC

Azure HPC Pack Azure Monitor Agent Azure Logic Apps Privilege escalation Security bypass