CVE-2025-33074 Azure Functions Remote Code Execution Vulnerability

...

CVE-2025-33074

The CVE-2025-33074 entry describes an improper verification of cryptographic signatures in Microsoft Azure Functions, enabling an authenticated attacker to execute code over a network. Several connected sources corroborate the issue across vendors and regions (NVD/NVDC, Red Hat, CNVD, MSRC, PT Se...

Azure Functions Remote Code Execution Vulnerability

Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...

PT-2025-18304 · Microsoft · Azure Functions

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Functions affected versions not specified Description: The issue is related to the improper verification of cryptographic signatures in Microsoft Azure Functions, allowing an authorized attacker to execute code over a network...

CVE-2025-33074: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...

Microsoft Azure Functions Data Forgery Vulnerability

Microsoft Azure Functions is a hosted Platform-as-a-Service PaaS provider from Microsoft Corporation USA that provides event-driven and scheduled compute resources for Azure cloud services. Microsoft Azure Functions has a data forgery issue vulnerability that stems from improper cryptographic...

November Microsoft Patch Tuesday

November Microsoft Patch Tuesday. 125 CVEs, 35 of which were added since October MSPT. 2 vulnerabilities with signs of exploitation in the wild: Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 Disclosure/Spoofing - NTLM Hash CVE-2024-43451 No signs of exploitation, but with a priva...

Imagine Cup Platform Code Execution

The vulnerability of the Imagine Cup platform’s Microsoft Azure Functions component is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

KLA74056 OSI vulnerability in Microsoft Azure

Information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2024-38204 Exploitation Related products Microsoft-Azure CVE list CVE-2024-38204 high KB list Solution Install necessary updat...

PT-2024-7082 · Microsoft · Azure Functions +1

Name of the Vulnerable Software and Affected Versions: Imagine Cup affected versions not specified Description: The issue is related to improper access control in Imagine Cup, allowing an authorized attacker to elevate privileges over a network. This can potentially lead to unauthorized access to...

Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha

Brazilian banking institutions are the target of a new campaign that distributes a custom variant of the Windows-based AllaKore remote access trojan RAT called AllaSenha. The malware is "specifically aimed at stealing credentials that are required to access Brazilian bank accounts, and leverages...

io.quarkus:quarkus-amazon-lambda-http (1.10.1.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.10.1.final) +72 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.10.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.10.1.final -...

io.quarkus:quarkus-amazon-lambda-http (1.3.0.cr2), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.cr2) +51 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.0.cr2)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.0.cr2 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.7.3.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.3.final) +69 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.3.final -...

io.quarkus:quarkus-amazon-lambda-http (1.7.0.cr2), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.0.cr2) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.0.cr2)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.0.cr2 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.3.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.0.cr1) +51 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.3.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-amazon-lambda-http (1.7.4.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.4.final) +68 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.7.4.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.4.final -...

io.quarkus:quarkus-azure-functions-http (0.23.2), io.quarkus:quarkus-azure-functions-http-deployment (0.23.2) +49 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.23.2)

io.quarkus:quarkus-vertx-http MAVEN version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-azure-functions-http 0.23.2 - io.quarkus:quarkus-azure-functions-http-deployment...

io.quarkus:quarkus-amazon-lambda-http (1.8.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.8.0.cr1) +70 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (1.8.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.8.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.quarkus:quarkus-azure-functions-http (0.23.0), io.quarkus:quarkus-azure-functions-http-deployment (0.23.0) +38 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-vertx-http (0.23.0)

io.quarkus:quarkus-vertx-http MAVEN version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-azure-functions-http 0.23.0 - io.quarkus:quarkus-azure-functions-http-deployment...