Azure AI Foundry Elevation of Privilege Vulnerability

Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network...

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...

Azure Machine Learning Notebook Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network...

Azure Entra ID Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network...

USN-8243-1: Linux kernel (Azure) vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

Prometheus Azure AD remote write OAuth client secret exposed via config API

...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.5.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.5.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.5.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.5.0 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.7.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.7.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.7.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.7.0 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.4), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.4) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.4)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.4 ...

apache-airflow-providers-microsoft-azure (>=11.0.0rc1, <=12.2.2), apimarket (>=3.2.0, <=3.3.1) +6 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (>=1.3.1, <=1.9.2)

microsoft-kiota-http PYPI version =1.3.1, =11.0.0rc1, =3.2.0, =1.0.0, =1.5.0, =3.16.1, =3.16.1, =1.2.0, =1.3.0 Source cves: CVE-2026-44503 Source advisory: SNYK:PYTHON-MICROSOFTKIOTAHTTP-16699940...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.3), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.3) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.3)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.3 ...

PT-2026-40479

Уязвимость программного средства для работы с алгоритмами машинного обучения Azure Machine Learning связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, проводить спуфинг-атаки...

Microsoft Azure Managed Instance for Apache Cassandra Access Control Vulnerability

Microsoft Azure Managed Instance for Apache Cassandra is a service provided by Microsoft for Apache Cassandra on Azure. There is an access control vulnerability in Microsoft Azure Managed Instance for Apache Cassandra; this vulnerability stems from improper access control mechanisms, which may...

KLA91028 OSI vulnerability in Microsoft Developer Tools

An information disclosure vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2026-42826 Exploitation Public exploits exist for this vulnerability. CVE list CVE-2026-42826 critical KB list...

PT-2026-40208

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Microsoft Enterprise Security Token Service affected versions not specified Description Exposure of sensitive information in Azure Entra ID allows an unauthorized actor to perform spoofing over a...

PT-2026-38582

Name of the Vulnerable Software and Affected Versions Azure Cloud Shell affected versions not specified Description Improper neutralization of special elements used in a command allows an unauthorized attacker to perform command injection, which can enable network-based spoofing attacks...

CVE-2026-42826: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network...

PT-2026-38576

Name of the Vulnerable Software and Affected Versions Azure Machine Learning affected versions not specified Description Improper neutralization of input during web page generation in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network. This issue is a form o...

PT-2026-38577

Name of the Vulnerable Software and Affected Versions Azure Managed Instance for Apache Cassandra affected versions not specified Description Improper access control allows an authorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newer...

Microsoft Azure DevOps information leakage vulnerability

Microsoft Azure DevOps is a team collaboration platform provided by the American company Microsoft. There is an information leakage vulnerability in Microsoft Azure DevOps. This vulnerability stems from the exposure of sensitive information to unauthorized participants, which may allow unauthoriz...