13391 matches found
CVE-2026-21227
The CVE-2026-21227 entry describes a path traversal vulnerability in Azure Logic Apps: improper limitation of a pathname to a restricted directory that could allow an unauthenticated attacker to elevate privileges over a network. The root cause is stated as a pathname restriction flaw in Azure Lo...
CVE-2026-21227
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24305
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2026-24305
CVE-2026-24305 maps to an Elevation of Privilege vulnerability in Azure Entra ID. Public disclosures in the connected sources indicate a high-impact issue with critical scores (NVD 9.8 overall; MS description 9.3) and a network/vector with no user interaction required. The exact vulnerable compon...
CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability
...
CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability
...
CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability
...
CVE-2026-21524
CVE-2026-21524 describes an information-disclosure vulnerability in Azure Data Explorer exposed to the network. Affected component is Azure Data Explorer’s data exposure path leading to unauthorized disclosure of information. Impact is Confidentiality High with network-based access and no require...
CVE-2026-21524 Azure Data Explorer Information Disclosure Vulnerability
...
CVE-2026-21524
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...
CVE-2026-24306
Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-24306 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24306 Azure Front Door Elevation of Privilege Vulnerability
...
CVE-2026-24306
Azure Front Door (AFD) is identified as the affected product for CVE-2026-24306, described as an improper access control vulnerability that could allow an unauthenticated network attacker to elevate privileges. The connected sources corroborate the high-severity impact (CVSSv3.1: 9.8, Network, no...
CVE-2026-23518
Fleet is open source device management software. In versions prior to 4.78.3, 4.77.1, 4.76.2, 4.75.2, and 4.53.3, a vulnerability in Fleet's Windows MDM enrollment flow could allow an attacker to submit forged authentication tokens that are not properly validated. Because JWT signatures were not...
Azure Front Door Elevation of Privilege Vulnerability
Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Azure Resource Manager Elevation of Privilege Vulnerability
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network...
Azure Data Explorer Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network...