31 matches found
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry that could be exploited to achieve privilege escalation. No customer action is required. The vulnerability, tracked as CVE-2026-85889 , carries a CVSS score of 10.0. "Missing authentication for critical function...
EUVD-2026-82594
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-82593
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85889
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85917
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-85917
A server-side request forgery (SSRF) vulnerability in Azure AI Foundry allows an unauthorized, network-based attacker to elevate privileges. The CVSS 3.1 score is 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating no privileges required, low complexity, and a high confide...
CVE-2026-85889
Azure AI Foundry is affected by a missing authentication vulnerability in a critical function, allowing an unauthenticated attacker to elevate privileges over a network. The flaw is rated CRITICAL (CVSS 3.1: 10.0) with a vector of network-based, low complexity, no privileges required, no user int...
Azure AI Foundry Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
Azure AI Foundry Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-28454
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-35435
CVE-2026-35435 relates to Azure AI Foundry M365 published agents, where improper access control allows an unauthenticated network attacker to elevate privileges within the targeted network. The available sources (NVD, Microsoft MSRC, and related feeds) describe the vulnerability andImpact as Elev...
CVE-2026-35435 Azure AI Foundry Elevation of Privilege Vulnerability
...
CVE-2026-35435 Azure AI Foundry Elevation of Privilege Vulnerability
...
CVE-2026-35435
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
Azure AI Foundry Elevation of Privilege Vulnerability
Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...
KLA91030 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azur...
Microsoft Azure AI Foundry M365 published agents 访问控制错误漏洞
Microsoft Azure AI Foundry M365 Published Agents are a series of enterprise-level intelligent agents provided by the American company Microsoft. There is an access control vulnerability in Microsoft Azure AI Foundry M365 Published Agents. This vulnerability stems from improper access control, whi...