15610 matches found
CVE-2026-26147
Azure Stack HCI Information Disclosure Vulnerability (CVE-2026-26147) can arise from improper input validation in Azure Compute Gallery, enabling a network-based disclosure by an authorized attacker. Impact: information disclosure; confidentiality impact HIGH, attack vector NETWORK, privileges re...
CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability
...
EUVD-2026-31514
Improper authentication in Azure Resource Manager ARM allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability
...
CVE-2026-47280
Improper authentication in Azure Resource Manager ARM allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-47280
CVE-2026-47280 describes an elevation of privilege in Azure Resource Manager due to improper authentication. The vulnerability is network-exploitable with no authentication or user interaction required, granting attacker HIGH integrity, confidentiality, and availability impact. CVSS 3.1 base scor...
CVE-2026-35430 Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
...
EUVD-2026-31510
Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network...
CVE-2026-40411 Azure Virtual Network Gateway Remote Code Execution Vulnerability
...
CVE-2026-40411
Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network...
CVE-2026-40411 Azure Virtual Network Gateway Remote Code Execution Vulnerability
...
CVE-2026-40411
Azure Virtual Network Gateway is affected by a Remote Code Execution vulnerability (CVE-2026-40411) due to improper input validation. An attacker with network access and low privileges can trigger code execution on the gateway, given an authentication context that is considered authorized. The CV...
CVE-2026-35430
CVE-2026-35430 covers an authorization bypass in Azure Privileged Identity Management (PIM) that permits an authorized attacker to elevate privileges over the network via a user-controlled key. Root cause: authorization bypass within PIM. Impact: high, enabling privilege escalation with network a...
EUVD-2026-31509
Authorization bypass through user-controlled key in Azure Privileged Identity Management PIM allows an authorized attacker to elevate privileges over a network...
CVE-2026-35430 Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
...
CVE-2026-35430
Authorization bypass through user-controlled key in Azure Privileged Identity Management PIM allows an authorized attacker to elevate privileges over a network...
CVE-2026-40412 Azure Orbital Spatio Remote Code Execution Vulnerability
...
EUVD-2026-31511
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network...