CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

CVE-2026-62835

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

EUVD-2026-48737

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

CVE-2026-62835 Azure Portal Information Disclosure Vulnerability

...

CVE-2026-62835 Azure Portal Information Disclosure Vulnerability

...

CVE-2026-62835

Azure Portal Information Disclosure vulnerability (CVE-2026-62835) stems from improper authorization, allowing an unauthenticated attacker to disclose information over a network. The available sources report CVSS v3.1 base score 9.3 (CRITICAL), with NETWORK attack vector, LOW complexity, NO privi...

PT-2026-64411

Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...

KLA91175 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-policyinsights, crossplane-provider-aws-eks-fips, splunk-otel-collector-fips, eksctl, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-chime-fips, opentelemetry-collector, crossplane-provider-aws-secretsmanager-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-policyinsights, crossplane-provider-aws-eks-fips, splunk-otel-collector-fips, eksctl, crossplane-provider-aws-kafkaconnect-fips, crossplane-provider-aws-chime-fips, opentelemetry-collector, crossplane-provider-aws-secretsmanager-fips,...

CVE-2026-42834

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-42834

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-42834

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-42834 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

CVE-2026-42834 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

EUVD-2026-31104

Improper link resolution before file access 'link following' in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2026-42834

CVE-2026-42834 describes an elevation-of-privilege vulnerability in Windows Admin Center within Azure Portal caused by improper link resolution before file access ("link following"). An authorized attacker could exploit this locally to gain higher privileges on the affected system. Affected compo...

PT-2026-42159

Name of the Vulnerable Software and Affected Versions Windows Admin Center in Azure Portal affected versions not specified Description Improper access control and incorrect link resolution before file access, known as link following, allows an authorized attacker to elevate privileges both locall...

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

Microsoft Azure Portal Windows Admin Center 后置链接漏洞

Microsoft Azure Portal Windows Admin Center is a Windows server and hybrid cloud management platform integrated with the Azure Portal by Microsoft Corporation. There is a postback link vulnerability in Microsoft Azure Portal Windows Admin Center, which stems from improper link resolution before...