KLA91236 Multiple vulnerabilities in Microsoft Azure

🗓️ 20 Aug 2026 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 23 Views

Multiple vulnerabilities in Microsoft Azure enable privilege escalation, RCE, and data disclosure.

Reporter	Title	Published	Views	Family All 174
BDU FSTEC	The vulnerability of the cloud platform for managing and protecting Microsoft Entra ID (formerly Azure Active Directory) is related to deserialization flaws, allowing attackers to execute arbitrary code.	24 Aug 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Azure SQL Database’s cloud relational database model, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the compatibility package for Microsoft Azure Entra ID lies in insufficient validation of requests on the server side, allowing attackers to escalate their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Arc software for connecting local infrastructure lies in the authentication process’s deficiencies, which allow attackers to escalate their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cloud platform for creating and launching automated work processes in Azure Logic Apps stems from an incorrect restriction on the path name to the restricted access catalog. This allows attackers to escalate their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure SQL Database, a cloud relational database, is related to deficiencies in access control. This allows attackers to escalate their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Arc software for connecting local infrastructure lies in the use of a name with an incorrect reference. This allows attackers to escalate their privileges.	30 Sep 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of the automated deployment and scaling service for managed Apache Cassandra Azure Managed Instances, related to the implementation or modification of arguments, allowing an attacker to execute arbitrary code.	30 Sep 202600:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62834
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65770
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65816
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66309
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66800
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68782
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68789
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69400
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69419
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69502

08 Sep 2026 00:00Current

9Critical risk

Vulners AI Score9

CVSS 3.19.8 - 10

EPSS0.01532

SSVC

Microsoft Azure elevation of privilege remote code execution information disclosure multiple services