Azure Security Vulnerabilities

CVE-2024-29993

Azure CycleCloud Elevation of Privilege...

CVE-2024-29992

Azure Identity Library for .NET Information Disclosure...

CVE-2024-29990

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege...

CVE-2024-29989

Azure Monitor Agent Elevation of Privilege...

CVE-2024-29063

Azure AI Search Information Disclosure...

CVE-2024-28917

Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege...

CVE-2024-26193

Azure Migrate Remote Code Execution...

CVE-2024-21424

Azure Compute Gallery Elevation of Privilege...

CVE-2024-20685

Azure Private 5G Core Denial of Service...

CVE-2024-29195

The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to...

CVE-2024-26203

Azure Data Studio Elevation of Privilege...

CVE-2024-21421

Azure SDK Spoofing...

CVE-2024-21330

Open Management Infrastructure (OMI) Elevation of Privilege...

CVE-2024-21400

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege...

CVE-2024-27099

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQP_VALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit...

CVE-2024-0353

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper...

CVE-2024-21397

Microsoft Azure File Sync Elevation of Privilege...

CVE-2024-21403

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege...

CVE-2024-21376

Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution...

CVE-2024-21364

Microsoft Azure Site Recovery Elevation of Privilege...

CVE-2024-21329

Azure Connected Machine Agent Elevation of Privilege...

CVE-2024-20667

Azure DevOps Server Remote Code Execution...

CVE-2024-20679

Azure Stack Hub Spoofing...

CVE-2024-25110

The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the...

CVE-2024-21643

IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. Anyone leveraging the SignedHttpRequestprotocol or the SignedHttpRequestValidatoris vulnerable. Microsoft.IdentityModel trusts the jkuclaim.....

CVE-2024-20676

Azure Storage Mover Remote Code Execution...

CVE-2024-21646

Azure uAMQP is a general purpose C library for AMQP 1.0. The UAMQP library is used by several clients to implement AMQP protocol communication. When clients using this library receive a crafted binary type data, an integer overflow or wraparound or memory safety issue can occur and may cause...

CVE-2023-5594

Improper validation of the server’s certificate chain in secure traffic scanning feature considered intermediate certificate signed using the MD5 or SHA1 algorithm as...

CVE-2023-21751

Azure DevOps Server Spoofing...

CVE-2023-36019

Microsoft Power Platform Connector Spoofing...

CVE-2023-35624

Azure Connected Machine Agent Elevation of Privilege...

CVE-2023-35625

Azure Machine Learning Compute Instance for SDK Users Information Disclosure...

CVE-2023-36437

Azure DevOps Server Remote Code Execution...

CVE-2023-36052

Azure CLI REST Command Information Disclosure...

CVE-2023-36737

Azure Network Watcher VM Agent Elevation of Privilege...

CVE-2023-36728

Microsoft SQL Server Denial of Service...

CVE-2023-36561

Azure DevOps Server Elevation of Privilege...

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution...

CVE-2023-36419

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege...

CVE-2023-36414

Azure Identity SDK Remote Code Execution...

CVE-2023-36415

Azure Identity SDK Remote Code Execution...

CVE-2023-38156

Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege...

CVE-2023-38155

Azure DevOps Server Remote Code Execution...

CVE-2023-33136

Azure DevOps Server Remote Code Execution...

CVE-2023-29332

Microsoft Azure Kubernetes Service Elevation of Privilege...

CVE-2023-41935

Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when checking whether the provided and expected CSRF protection nonce are equal, potentially allowing attackers to use statistical methods to obtain a valid...

CVE-2023-38188

Azure Apache Hadoop Spoofing...

CVE-2023-38176

Azure Arc-Enabled Servers Elevation of Privilege...

CVE-2023-36881

Azure Apache Ambari Spoofing...

CVE-2023-36877

Azure Apache Oozie Spoofing...