CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

CVE-2026-23660

CVE-2026-23660 concerns Windows Admin Center in the Azure Portal with an Elevation of Privilege vulnerability. Attack vector is local, requiring LOW privileges with no user interaction, and the impact is HIGH on confidentiality, integrity, and availability. The base score is 7.8 (CVSS 3.1). The e...

CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

...

2026-03 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5078766)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-03 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5078737)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...

Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally...

March 10, 2026—Hotpatch KB5078736 (OS Build 26100.32463)

None None...

KB5077473 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: March 10, 2026

None None...

Azure IoT Explorer Information Disclosure Vulnerability

Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

March 10, 2026—KB5078774 (Monthly Rollup)

None None...

Azure MCP Server Tools Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...

Azure IOT Explorer Spoofing Vulnerability

Server-side request forgery ssrf in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network...

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

Azure IoT Explorer Information Disclosure Vulnerability

Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

March 10, 2026—KB5078775 (Monthly Rollup)

None None...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, yunikorn-k8shim, kubernetes-csi-external-provisioner, external-dns, k8s-device-plugin, mesosphere-vsphere-csi, sftpgo-plugin-eventstore, datadog-agent, crossplane-provider-aws-cloudfront, gitlab-kas, kots, prometheus-alertmanager, kubescape,...

PT-2026-24327

Name of the Vulnerable Software and Affected Versions Azure Windows Virtual Machine Agent affected versions not specified Azure Arc on Windows affected versions not specified Description A security issue exists in Azure Windows Virtual Machine Agent and Azure Arc on Windows that allows an attacke...

Microsoft Azure Connected Machine Agent 安全漏洞

Microsoft Azure Connected Machine Agent is a core component of Microsoft that connects non-Azure servers to the Azure console. There is a security vulnerability present in Microsoft Azure Connected Machine Agent. Attackers can exploit this vulnerability to gain higher privileges...