CVE-2026-33117

The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...

CVE-2026-33117

The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...

CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability

...

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability

...

PT-2026-7411

Name of the Vulnerable Software and Affected Versions Azure AI Language Authoring SDK version 1.0.0 Description A flaw exists in the Azure AI Language Authoring SDK that allows an unauthorized attacker to execute code over a network. This is due to the deserialization of untrusted data. The issue...

EUVD-2020-8959

Malware in sbrugna...

EUVD-2022-3213

Malicious code in bioql PyPI...

EUVD-2024-19130

Malicious code in bioql PyPI...

EUVD-2022-1856

Malicious code in bioql PyPI...

CVE-2011-1068

Microsoft Windows Azure Software Development Kit SDK 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support the use of cookies for maintaining state, which allows remote attackers to obtain potentially sensitive information by...

MAL-2025-1653 Malicious code in azure-sdk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479067c01646643f73d6f81188d5b155d76d985758485a7b0c6fe92326db09d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-sdk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479067c01646643f73d6f81188d5b155d76d985758485a7b0c6fe92326db09d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11943 Malicious code in azure-sdk-for-java-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80272d9c808f50bcde1ac09ec61a64d13c6151cb5ce8724af88330aaa8a0cb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-sdk-for-java-codegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d80272d9c808f50bcde1ac09ec61a64d13c6151cb5ce8724af88330aaa8a0cb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-5737 · Microsoft · Azure Iot Sdk

Name of the Vulnerable Software and Affected Versions: Azure IoT SDK affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to execute arbitrary code. Recommendations: At the moment, there is no information about a...

GO-2024-2918 Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity

Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity...

Spoofing

Azure SDK Spoofing Vulnerability...

Microsoft Azure SDK Security Vulnerability

Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Microsoft Azure SDK. An attacker could exploit this vulnerability to perform spoofing attacks...