EUVD-2026-82599

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83946

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83946: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83946

CVE-2026-83946 is a cross-site scripting (XSS) vulnerability in Azure Portal , caused by improper neutralization of input during web page generation. An unauthorized attacker with network access can exploit this to perform spoofing , achieving high confidentiality impact and low integrity impact ...

Azure Portal Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...

PT-2026-95182

Name of the Vulnerable Software and Affected Versions Azure Portal affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allows an...

CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

CVE-2026-62835 Azure Portal Information Disclosure Vulnerability

...

EUVD-2026-48737

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

CVE-2026-62835 Azure Portal Information Disclosure Vulnerability

...

CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

CVE-2026-62835

Azure Portal Information Disclosure vulnerability (CVE-2026-62835) stems from improper authorization, allowing an unauthenticated attacker to disclose information over a network. The available sources report CVSS v3.1 base score 9.3 (CRITICAL), with NETWORK attack vector, LOW complexity, NO privi...

CVE-2026-62835: Improper Authorization

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

PT-2026-64411

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

KLA91175 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-datasync-fips, crossplane-provider-aws-servicediscovery, prometheus-fips, chainloop-control-plane-fips, crossplane-provider-aws-cloudfront-fips, crossplane-provider-azure-portal, prometheus-operator, terragrunt, coder, kube-arangodb-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-datasync-fips, crossplane-provider-aws-servicediscovery, prometheus-fips, chainloop-control-plane-fips, crossplane-provider-aws-cloudfront-fips, crossplane-provider-azure-portal, prometheus-operator, terragrunt, coder, kube-arangodb-fips,...

CVE-2026-42834

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-42834

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-42834

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...