190 matches found
Vulnerabilities in Microsoft Azure
Microsoft has identified 4 vulnerabilities in various Azure components. A malicious individual could exploit these vulnerabilities to carry out attacks that can lead to various types of damage, as mentioned in the table below. The vulnerability with identifier CVE-2026-69854 has a CVSS score of...
CVE-2026-62895
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62895
Azure Arc SQL Server Extension is affected by a permissive cross-domain policy that permits untrusted domains, enabling an elevation of privilege over the network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 8.8 HIGH , AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The r...
EUVD-2026-73168
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-63627
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-63621
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69555
Azure Arc is affected by an incorrect authorization flaw that allows an unauthenticated, remote attacker to elevate privileges over the network. The vulnerability is rated CVSS 3.1: 10.0 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating high confidentiality and integrity...
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-65816
Azure Arc (Microsoft) is affected by an elevation of privilege vulnerability caused by the use of an incorrectly-resolved name or reference. An unauthorized, unauthenticated attacker can exploit this over the network to gain elevated privileges, with high impact on confidentiality, integrity, and...
Azure Arc Elevation of Privilege Vulnerability
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Azure Arc Elevation of Privilege Vulnerability
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
PT-2026-79201
Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue involving the use of an incorrectly-resolved name or reference allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
PT-2026-79212
Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...
