533 matches found
KLA91028 OSI vulnerability in Microsoft Developer Tools
An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-42826 Exploitation Related products Microsoft-Azure CVE list CVE-2026-42826 critical Solution Install...
CVE-2026-23658
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-13174
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-23658
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-23658 Azure DevOps: msazure Elevation of Privilege Vulnerability
...
CVE-2026-23658
CVE-2026-23658 affects Microsoft Azure DevOps: msazure, with root cause described as insufficiently protected credentials enabling an unauthorized network-based privilege escalation. The description and multiple connected sources confirm impact to Azure DevOps components and privilege elevation, ...
CVE-2026-23658 Azure DevOps: msazure Elevation of Privilege Vulnerability
...
CVE-2026-23658
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
Azure DevOps: msazure Elevation of Privilege Vulnerability
Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
PT-2026-26350
Azure DevOps: msazure Elevation of Privilege Vulnerability CVE: CVE-2026-23658 PT-Identifier: PT-2026-26350 Vendor: Microsoft Product: Azure DevOps: msazure CVSS: 8.6 Credits: n/a Description: Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileg...
KLA90946 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Cloud Shell can be exploited remotely to gai...
Security Updates for Azure DevOps 2022 XSS (February 2026)
The Microsoft Team Foundation Server is missing a security update. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2026-21512 Note that Nessus has not...
CVE-2026-21512
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-21512
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-21512
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-21512
CVE-2026-21512 describes a server-side request forgery vulnerability in Azure DevOps Server . The connected documents consistently state an SSRF issue that enables an authorized attacker to perform spoofing over a network , effectively allowing impersonation of another user within affected compon...
CVE-2026-21512
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability
...