55 matches found
EUVD-2026-108542
Improper link resolution before file access 'link following' in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-110063
Improper link resolution before file access 'link following' in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-110063
The VM Inspector for Azure Virtual Machines is affected by a vulnerability caused by improper link resolution before file access (link following). This flaw allows an unauthorized attacker to achieve elevation of privilege over a network. While the technical root cause is identified as CWE-59 , s...
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network...
PT-2026-121671
Improper link resolution before file access 'link following' in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-63629
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543
An SSRF vulnerability in Azure Virtual Machines allows an authorized low-privilege attacker to elevate privileges over a network, with a HIGH CVSS 3.1 base score of 8.5. No patch version, workaround, or exploitation evidence is provided in the documents.
Azure Virtual Machines Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
PT-2026-79211
Name of the Vulnerable Software and Affected Versions Azure Virtual Machines affected versions not specified Description Server-side request forgery SSRF, a flaw where an attacker induces a server-side application to make requests to an unintended location, allows an authorized attacker to elevat...
EUVD-2026-10586
Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...
EUVD-2025-24365
Malicious code in bioql PyPI...
EUVD-2024-19015
Malicious code in bioql PyPI...
EUVD-2025-24276
Malicious code in bioql PyPI...
Azure Virtual Machines Spoofing
The vulnerability of Azure Virtual Machines is related to lack of access control. Exploiting this vulnerability can allow attackers to carry out spoofing attacks...
Azure Virtual Machines Information Disclosure
The vulnerability of Azure Virtual Machines is related to the exposure of information. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2025-49707
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...
CVE-2025-53781
Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...
Vulnerabilities fixed in Azure products
Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...