CVE-2026-21528

Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

PT-2025-20430 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in Azure, which allows an authorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

Azure SDK Spoofing

The vulnerability of the Azure SDK software development kit is related to errors in information representation by the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure products. A malicious party could exploit the vulnerabilities to gain elevated privileges and potentially execute arbitrary code with elevated privileges, or gain access to sensitive data. The most serious vulnerability is located in the...

AZL-35471 CVE-2024-27099 affecting package azure-iot-sdk-c for versions less than 2024.03.04-1

The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect AMQPVALUE failed state, may cause a double free problem. This may cause a RCE. Update submodule with commit 2ca42b6e4e098af2d17e487814a91d05f6ae4987...

Microsoft Azure 日志信息泄露漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A log information disclosure vulnerability exists in the Microsoft Azure SDK. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...

Microsoft Azure SDK Security Vulnerability

Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Microsoft Azure SDK. The following products and versions are affected:Azure SDK for Java...

Microsoft Azure SDK Security Vulnerability

Microsoft Azure SDK is a code base from Microsoft that supports interaction with programming languages to manage Azure. A security vulnerability exists in Azure SDK for C. There is no information about this vulnerability at this time, so please stay tuned to CNNVD or vendor announcements. The...

PT-2011-2853

Name of the Vulnerable Software and Affected Versions Microsoft Windows Azure Software Development Kit SDK versions 1.3.x before 1.3.20121.1237 Description The issue is related to the improper support of cookies for maintaining state in ASP.NET applications when used with Full IIS and a Web Role...

CVE-2011-1068: Improper Input Validation

Microsoft Windows Azure Software Development Kit SDK 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support the use of cookies for maintaining state, which allows remote attackers to obtain potentially sensitive information by...