13521 matches found
CVE-2025-59218
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59246
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59247
Azure PlayFab Elevation of Privilege Vulnerability...
EUVD-2025-33552
Azure Entra ID Elevation of Privilege Vulnerability...
EUVD-2025-33551
Azure PlayFab Elevation of Privilege Vulnerability...
EUVD-2025-33550
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an authorized attacker to perform spoofing over a network...
EUVD-2025-33553
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59218
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59246
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2025-59247
Azure PlayFab Elevation of Privilege Vulnerability...
CVE-2025-55321
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability
...
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability
...
CVE-2025-55321
CVE-2025-55321 refers to a cross-site scripting vulnerability in Azure Monitor (Azure Monitor Log Analytics) where improper input neutralization during web page generation enables spoofing of the user interface over the network. Affected product family includes Azure Monitor/Log Analytics. The ro...
CVE-2025-59247
CVE-2025-59247 is an Elevation of Privilege vulnerability affecting Azure PlayFab. Multiple sources (Microsoft/MSRC advisory, NCSC, EUVD, CIRCL/NVD paraphernalia) identify it as a privilege-escalation issue with mitigations implemented via Microsoft updates; patching is advised. The NVD/NCSC mate...
CVE-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability
...
CVE-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability
...
CVE-2025-59246
Concrete details found: CVE-2025-59246 affects Microsoft Entra ID via an internal authentication-bypass in the Entra ID Graph API extension role-synchronization path, enabling remote elevation of privileges (no credentials required). Exploitation described in a GitHub exploit repo confirms unauth...