CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability

...

CVE-2026-62830

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability

...

CVE-2026-62830

CVE-2026-62830 concerns the Azure SRE Agent, where a missing authorization flaw could allow an authenticated, network-based attacker to elevate privileges. The incident is rated critical (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; base score 9.9). Documents identify the root cause as insuffic...

CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability

...

CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability

...

CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability

...

CVE-2026-56161

Azure Logic Apps is identified in CVE-2026-56161 as having improper access control that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 9.6 (CRITICAL) with NETWORK attack vector, LOW attack complexity, LOW privileges required, and no user interacti...

CVE-2026-56161

Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network...

CVE-2026-68823

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network...

CVE-2026-68823

Azure Confidential Ledger is affected by CVE-2026-68823, a remote code execution vulnerability caused by an exposed dangerous method/function. An authorized attacker could exploit this over the network to execute code. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H with a bas...

CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability

...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-50481

CVE-2026-50481 affects Azure Active Directory, where modification of assumed-immutable data (maid) enables an authorized attacker to elevate privileges over a network. The CVSS data indicates NETWORK attack vector, LOW access complexity, LOW privileges required, and HIGH confidentiality/integrity...

CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability

...

CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability

...

CVE-2026-62836

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62836

CVE-2026-62836 affects Azure SQL Managed Instance. The vulnerability arises from improper restriction of the communication channel to intended endpoints, enabling a network-based elevation of privileges by an unauthenticated attacker. Affected products include Azure SQL Managed Instance (and rela...