16205 matches found
CVE-2026-21522 Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
...
CVE-2026-21522
Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
CVE-2026-23655
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2026-23655
CVE-2026-23655 : The issue involves cleartext storage of sensitive information in the Azure Compute Gallery, enabling an authorized attacker to disclose data over a network. From the provided data, the CVSS v3.1 base score is 6.5 (Medium) with Network access, Low attack complexity, Low privileges...
CVE-2026-23655 Microsoft ACI Confidential Containers Information Disclosure Vulnerability
...
CVE-2026-21512
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability
...
CVE-2026-21512 Azure DevOps Server Cross-Site Scripting Vulnerability
...
CVE-2026-21512
CVE-2026-21512 describes a server-side request forgery vulnerability in Azure DevOps Server . The connected documents consistently state an SSRF issue that enables an authorized attacker to perform spoofing over a network , effectively allowing impersonation of another user within affected compon...
Azure Local Remote Code Execution Vulnerability
Improper certificate validation in Azure Local allows an unauthorized attacker to execute code over a network...
Azure HDInsight Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...
Azure SDK for Python Remote Code Execution Vulnerability
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...
Azure IoT Explorer Information Disclosure Vulnerability
Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...
Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...
Microsoft ACI Confidential Containers Information Disclosure Vulnerability
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...
Azure DevOps Server Cross-Site Scripting Vulnerability
Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...
February 10, 2026—KB5075970 (Monthly Rollup)
None None...