EUVD-2025-10165

Malicious code in bioql PyPI...

CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-27489

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-27489

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...

CVE-2025-27489

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-25002

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

CVE-2025-26628

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

CVE-2025-27489

CVE-2025-27489 is an Azure Local elevation-of-privilege vulnerability caused by improper input validation. It affects Azure Local components such as the Azure Local Cluster and the Windows VBS enclave, enabling an authorized attacker with local access to elevate privileges. Public details in conn...

CVE-2025-26628

Technical details about CVE-2025-26628 are not publicly provided in the connected documents; no specific affected product versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability

...

CVE-2025-25002

CVE-2025-25002 affects Azure Local Cluster and involves insertion of sensitive information into log files, enabling an authorized attacker to disclose data over an adjacent network. The connected documents confirm the Azure Local Cluster as the vulnerable component and describe the impact as data...

CVE-2025-25002 Azure Local Cluster Information Disclosure Vulnerability

...

Azure Local Elevation of Privilege Vulnerability

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...

Azure Local Cluster Information Disclosure Vulnerability

Insufficiently protected credentials in Azure Local Cluster allows an authorized attacker to disclose information locally...

Azure Local Cluster Information Disclosure Vulnerability

Insertion of sensitive information into log file in Azure Local Cluster allows an authorized attacker to disclose information over an adjacent network...

PT-2025-15491 · Microsoft · Azure Local Cluster

Name of the Vulnerable Software and Affected Versions: Azure Local Cluster affected versions not specified Description: The issue allows an authorized attacker to disclose sensitive information over an adjacent network by inserting it into a log file in an Azure Local Cluster. This can potentiall...