15276 matches found
Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2026-56288)
The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2026-56288 advisory. - GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted...
Exploit for CVE-2026-50338
CVE-2026-50338 Spring Cloud Azure B2C Resource Server Cross-I...
EUVD-2026-44365
Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access to the generated response file to obtain the Azure Key Vault client secret in cleartext, even when the option to exclud...
EUVD-2026-43764
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
EUVD-2026-43760
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
EUVD-2026-43781
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network...
EUVD-2026-44028
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...
EUVD-2026-43792
Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network...
Vulnerabilities in Microsoft Azure
Microsoft has identified vulnerabilities in various Azure components. Malicious actors could exploit these vulnerabilities to cause denial-of-service attacks, circumvent security measures, or gain elevated privileges, potentially allowing them to access data that they were not originally authoriz...
CVE-2026-15642
In Devolutions Server versions 2026.1.22.0 and 2026.2.11.0 , the Recovery Kit response file generation feature fails to properly sanitize output. This flaw allows an attacker with access to the generated response file to obtain the Azure Key Vault client secret in cleartext. This exposure occurs ...
CVE-2026-15642
Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access to the generated response file to obtain the Azure Key Vault client secret in cleartext, even when the option to exclud...
CVE-2026-15642
Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access to the generated response file to obtain the Azure Key Vault client secret in cleartext, even when the option to exclud...
CVE-2026-15642
Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access to the generated response file to obtain the Azure Key Vault client secret in cleartext, even when the option to exclud...
CVE-2026-58279
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
CVE-2026-57969
Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
CVE-2026-50652
Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-50653
Loop with unreachable exit condition 'infinite loop' in Azure Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-50338
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...
