CVE-2025-59503

CVE-2025-59503 affects Azure Compute Gallery (Azure Compute Resource Provider). Root cause is SSRF that allows an unauthorized attacker to elevate privileges over the network. Documented impact is privilege escalation with high confidentiality/integrity/availability consequences. Remediation refe...

CVE-2025-59503 Azure Compute Resource Provider Elevation of Privilege Vulnerability

...

Azure Compute Resource Provider Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-59503: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network...

Microsoft Azure Compute Gallery 代码问题漏洞

Microsoft Azure Compute Gallery is a service for managing virtual machines from Microsoft Corporation in the United States. A code issue vulnerability exists in Microsoft Azure Compute Gallery that stems from server-side request forgery and could lead to an authorized attacker to elevate privileg...

PT-2025-43564

Name of the Vulnerable Software and Affected Versions Azure Compute Gallery affected versions not specified Description An authorized attacker can elevate privileges over a network due to a server-side request forgery issue in Azure Compute Gallery. This allows for potential misuse of network...

The vulnerability of the software for creating and managing images of virtual machines and containers in Azure Compute Gallery lies in improper external management of file names or paths, allowing an attacker to escalate their privileges.

The vulnerability of the software for creating and managing images of virtual machines and containers in Azure Compute Gallery is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the software for creating and managing images of virtual machines and containers in Azure Compute Gallery lies in improper external management of file names or paths, allowing an attacker to escalate their privileges.

The vulnerability of the software for creating and managing images of virtual machines and Azure Compute Gallery containers is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability

...

CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability

...

CVE-2025-59292

CVE-2025-59292 affects Confidential Azure Container Instances. External control of a file name or path in this component can let an authorized attacker elevate privileges locally. The CVE is corroborated by multiple sources in the Connected Documents (Microsoft MSRC entry, EU/NCSC/MSS intel, and ...

Azure Compute Gallery Elevation of Privilege Vulnerability

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

KLA89270 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain privileges. 2. An elevatio...

EUVD-2021-26897

Malware in sbrugna...

EUVD-2024-19133

Malicious code in bioql PyPI...

The vulnerability of the software for creating and managing images of virtual machines and Azure Compute Gallery containers lies in the lack of access control mechanisms. This allows attackers to escalate their privileges.

The vulnerability of the software for creating and managing images of virtual machines and Azure Compute Gallery containers is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges...

Vulnerabilities fixed in Microsoft Azure products

Microsoft has fixed vulnerabilities in Azure and various applications within Azure. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS. Remote code execution User rights Access to sensitive data Access to system...

CVE-2024-21424: Improper Access Control

Azure Compute Gallery Elevation of Privilege Vulnerability...

PT-2024-2890 · Microsoft · Azure Compute Gallery

Name of the Vulnerable Software and Affected Versions: Azure Compute Gallery affected versions not specified Description: The issue is related to inadequate access control in the Azure Compute Gallery, which is a tool for creating and managing virtual machine VM and container images. This can be...

Adding Azure Compute Account Fails With "This server does not seem to have Azure PowerShell installed"

Challenge When attempting to add an Azure Compute Account using the "Create a new account" option, the error message is shown stating that "This server does not seem to have Azure PowerShell installed." even though the Azure PowerShell is installed. Get-Module -ListAvailable -Name Azure -Refresh...