The vulnerability of Azure SQL Database’s cloud relational database model, related to insufficient validation of queries on the server side, allows attackers to escalate their privileges.

The vulnerability of the Azure SQL Database cloud relational database is related to insufficient validation of queries on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the Azure Arc software for connecting local infrastructure lies in the authentication process’s deficiencies, which allow attackers to escalate their privileges.

The vulnerability of the Azure Arc local infrastructure connection software relates to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, is related to deficiencies in access control. This allows attackers to escalate their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the Azure Data Factory cloud service, related to errors in verifying the cryptographic signature, allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Data Factory service is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the compatibility package for Microsoft Azure Entra ID lies in insufficient validation of requests on the server side, allowing attackers to escalate their privileges.

The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the cloud platform for creating and launching automated work processes in Azure Logic Apps stems from an incorrect restriction on the path name to the restricted access catalog. This allows attackers to escalate their privileges.

The vulnerability of the cloud platform for creating and launching automated work processes in Azure Logic Apps is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remote...

The vulnerability of the Azure SQL Database, a cloud relational database, stems from the lack of protection for SQL query structures, allowing attackers to exploit their privileges.

The vulnerability of the Azure SQL Database cloud relational database model is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Azure Arc software for connecting local infrastructure lies in the use of a name with an incorrect reference. This allows attackers to escalate their privileges.

The vulnerability of the Azure Arc local infrastructure connection software relates to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-93853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

DEBIAN-CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

UBUNTU-CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

EUVD-2026-89463

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853

The Barman backup tool is vulnerable to unverified ownership during snapshot backup deletion, affecting versions up to and including 3.20.0 (specifically versions from 3.4.0 for Google Cloud, 3.6.0 for Azure, and 3.7.0 for AWS). The root cause is that Barman reads snapshot identifiers from the ba...

CVE-2026-93853 Barman snapshot backup deletion trusts unverified backup catalog metadata

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853 Barman snapshot backup deletion trusts unverified backup catalog metadata

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

​​Beyond source code: A path to the keys to the kingdom

What began as a single compromised identity quickly expanded into an organization's development and cloud environments. In our latest Cyberattack Series report, we examine how the Microsoft Detection and Response Team DART—the team that delivers Microsoft Defender Experts Cybersecurity Incident...