The vulnerability of the cloud service for storing immutable confidential records and logs in Azure Confidential Ledger allows a perpetrator to execute arbitrary code.

The vulnerability of cloud services for storing confidential records and logs in Azure Confidential Ledger is related to the use of dangerous methods or functions. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code...

EUVD-2026-54319

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823

Azure Confidential Ledger is affected by CVE-2026-68823, a remote code execution vulnerability caused by an exposed dangerous method/function. An authorized attacker could exploit this over the network to execute code. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H with a bas...

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability

...

CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability

...

Azure Confidential Ledger Remote Code Execution Vulnerability

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823: Exposed Dangerous Method or Function

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

KLA91190 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

CVE-2026-26124

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-26124

CVE-2026-26124 concerns Microsoft ACI Confidential Containers with elevation of privilege in Azure Compute Gallery. The description indicates an authorized attacker can locally elevate privileges via a flaw described as '.../...//' in the Compute Gallery. Connected advisories show Microsoft fixed...

[SECURITY] Fedora 42 Update: rust-az-tdx-vtpm-0.7.4-1.fc42

VTPM based TDX attestation for Azure Confidential VMs...

Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach

Microsoft on Monday announced that it has moved the Microsoft Account MSA signing service to Azure confidential virtual machines VMs and that it's also in the process of migrating the Entra ID signing service as well. The disclosure comes about seven months after the tech giant said it completed...

Malicious code in azure-confidential-ledger-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f02d4f978871b6e194c6be41add4e205a8e70c5f06030d0cb9dab00e52ba19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-confidential-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990af1e5ea3a4d642497c5f273b8dcebb97f2f5b201295507b68326d1b424b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-confidential-ledger-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d670e394d24ec41bc269868b666ded7112cb794ac280f1a6ed52c2291fab5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1309 Malicious code in azure-confidential-ledger-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d670e394d24ec41bc269868b666ded7112cb794ac280f1a6ed52c2291fab5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...