13393 matches found
CVE-2026-21228
CVE-2026-21228 affects Azure Local and is due to improper certificate validation. The TALOS update describes an attacker intercepting unsecured communication between the configurator and target systems, tampering responses to trigger command injection with administrative privileges and potentiall...
CVE-2026-21228 Azure Local Remote Code Execution Vulnerability
...
CVE-2026-21529 Azure HDInsight Spoofing Vulnerability
...
CVE-2026-21529 Azure HDInsight Spoofing Vulnerability
...
CVE-2026-21529
Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...
CVE-2026-21529
CVE-2026-21529 involves an improper neutralization of input during web page generation (cross-site scripting) in Azure HDInsight. The issue allows an authorized attacker to perform network-based spoofing by exploiting insufficient input handling during page creation. The vulnerability affects the...
CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability
...
CVE-2026-21531
CVE-2026-21531 involves deserialization of untrusted data in the Azure SDK, allowing remote code execution over a network. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 9.8 (CRITICAL). The impact is high on confidentiality, integrity, and availability, with netw...
CVE-2026-21531
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...
CVE-2026-21531 Azure SDK for Python Remote Code Execution Vulnerability
...
CVE-2026-21528
CVE-2026-21528 affects the Azure IoT SDK with binding to an unrestricted IP address, enabling an unauthorized attacker to disclose information over a network. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) yields a base score of 6.5 (Medium). Affected component is the Azure IoT SDK; t...
CVE-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability
...
CVE-2026-21528 Azure IoT Explorer Information Disclosure Vulnerability
...
CVE-2026-21522
Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2026-23655
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-23655
CVE-2026-23655 : The issue involves cleartext storage of sensitive information in the Azure Compute Gallery, enabling an authorized attacker to disclose data over a network. From the provided data, the CVSS v3.1 base score is 6.5 (Medium) with Network access, Low attack complexity, Low privileges...