Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubecolor, k8sgpt, openbao, go-licenses, mailpit, grafana-alloy, caddy, envoy-ratelimit, frp, cni-plugins, terraform-provider-azuread, external-dns, thanos, cloud-provider-aws, gitleaks, kapp, pgtimetable, nsc, redis-operator, juicefs, actions-runner-controller,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: k8sgpt, openbao, go-licenses, mailpit, grafana-alloy, caddy, envoy-ratelimit, frp, terraform-provider-azuread, external-dns, thanos, cloud-provider-aws, gitleaks, kapp, pgtimetable, nsc, redis-operator, juicefs, actions-runner-controller, mattermost, k8ssandra-client...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips, volume-modifier-for-k8s,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator-fips, amazon-k8s-cni, elvish, hydra-fips, pulumi-kubernetes-operator, chaos-mesh, croc, amass, paranoia, backup-restore-operator, zitadel, step-fips, kubernetes-csi-external-snapshotter, vault-csi-provider-fips, tigera-operator-fips,...

Microsoft Azure Compute Gallery security vulnerabilities

Microsoft Azure Compute Gallery is a service provided by Microsoft in the United States that manages virtual machines. There are security vulnerabilities in Microsoft Azure Compute Gallery. Attackers can exploit these vulnerabilities to obtain sensitive information...

Microsoft Azure SDK code-related vulnerabilities

The Microsoft Azure SDK is a code library developed by Microsoft that allows for interaction with programming languages to manage Azure services. The Microsoft Azure SDK has code-related vulnerabilities. Attackers can exploit these vulnerabilities to execute code remotely...

Microsoft Azure HDInsight Cross-Site Script Vulnerability

Microsoft Azure HDInsight is a hosted cluster platform provided by Microsoft Corporation, offering managed, full-spectrum, open-source cloud analysis services for businesses. Microsoft Azure HDInsight has a cross-site scripting vulnerability. Attackers utilize this vulnerability to carry out...

Microsoft Azure IoT security vulnerabilities

Microsoft Azure IoT is a central hosting service provided by the American company Microsoft. It is used for bidirectional communication between IoT applications and the devices they manage. There are security vulnerabilities in Microsoft Azure IoT. Attackers can exploit these vulnerabilities to...

Microsoft Azure Compute Gallery command injection vulnerability

Microsoft Azure Compute Gallery is a service provided by Microsoft in the United States that manages virtual machines. There is a command injection vulnerability present in Microsoft Azure Compute Gallery. Attackers can exploit this vulnerability to gain higher privileges...

PT-2026-7414

Name of the Vulnerable Software and Affected Versions Azure Compute Gallery affected versions not specified Description An authorized attacker may be able to disclose sensitive information over a network due to the cleartext storage of that information within Azure Compute Gallery. Approximately...

PT-2026-7410

Improper neutralization of input during web page generation 'cross-site scripting' in Azure HDInsights allows an authorized attacker to perform spoofing over a network...

PT-2026-7411

Name of the Vulnerable Software and Affected Versions Azure AI Language Authoring SDK version 1.0.0 Description A flaw exists in the Azure AI Language Authoring SDK that allows an unauthorized attacker to execute code over a network. This is due to the deserialization of untrusted data. The issue...

PT-2026-7334

Name of the Vulnerable Software and Affected Versions Azure Local affected versions not specified Description A flaw in the certificate validation process within Azure Local can allow a remote attacker to execute code. This issue involves errors in the authentication procedure for certificates...

KLA90871 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

PT-2026-7398

Server-side request forgery ssrf in Azure DevOps Server allows an authorized attacker to perform spoofing over a network...

PT-2026-7405

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

PT-2026-7409

Name of the Vulnerable Software and Affected Versions Azure IoT SDK affected versions not specified Description An issue exists where binding to an unrestricted IP address in the Azure IoT SDK can allow an unauthorized attacker to disclose information over a network. Recommendations At the moment...

CVE-2026-21531: Deserialization of Untrusted Data

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

CVE-2026-23655: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...