CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability

...

PT-2025-36095

Name of the Vulnerable Software and Affected Versions Azure Networking affected versions not specified Description An elevation of privilege issue exists in Azure Networking. This allows for unauthorized access and potential compromise of network resources. Recommendations At the moment, there is...

PT-2025-36100

Name of the Vulnerable Software and Affected Versions: Azure Bot Service affected versions not specified Description: An elevation of privilege issue exists within the Azure Bot Service. This allows for unauthorized privilege escalation. Recommendations: At the moment, there is no information abo...

KLA87341 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Bot Service can be exploited remotely to gain privileges. 2. An elevation ...

Microsoft Azure Bot Service 访问控制错误漏洞

Microsoft Azure Bot Service is a hosted service for developing, deploying, and managing intelligent chatbots from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Bot Service that stems from elevation of privilege...

PT-2025-36098

Name of the Vulnerable Software and Affected Versions Microsoft Entra ID affected versions not specified Description A critical flaw in the authentication procedure of Microsoft Entra ID formerly Azure Active Directory allowed remote attackers to elevate privileges and impersonate any user,...

Microsoft Azure Networking 访问控制错误漏洞

Microsoft Azure Networking is a collection of network-related service features from Microsoft Corporation in the United States. An access control error vulnerability exists in Microsoft Azure Networking that stems from a potential elevation of privilege...

Linux Distros Unpatched Vulnerability : CVE-2023-3128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to...

The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

The recent mass-theft of authentication tokens from Salesloft , whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google war...

Malicious code in azure-service-bus-emulator-node-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 871b655dee4c193ddb7e1b7be9e6a50920aa93049ffc2e663d74a7a5cc79ebff The OpenSSF Package Analysis project identified 'azure-service-bus-emulator-node-sample' @ 10.0.1 npm as malicious. It is considered malicious...

SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2025:03011-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03011-1 advisory. The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were...

MAL-2025-42127 Malicious code in azure-ipam-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in azure-ipam-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44b5c0e4141f25b2fb25c0fcd206aa203961a4a13336461bab2825b51576f88d The OpenSSF Package Analysis project identified 'azure-ipam-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-42126 Malicious code in azure-functions-templates-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...

Malicious code in azure-functions-templates-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b042b6071c2aede4bcb5d299376c83daa1a911adb92cc27204804dba0b29dbc3 The OpenSSF Package Analysis project identified 'azure-functions-templates-build' @ 1.0.0 npm as malicious. It is considered malicious because: ...

SUSE-SU-2025:03011-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2019-11135: enabled CONFIGX86INTELTSXMODEAUTO bsc1139073, bsc1246695. - CVE-2024-36028: mm/hugetlb: fix DEBUGLOCKSWARNON1 when dissolvefreehugetlbfolio...

MAL-2025-41622 Malicious code in azure-iothub-service-client (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in azure-iothub-service-client (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2022-39327

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection...

Securing and governing the rise of autonomous agents​​

In this blog, you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer CISO for Identity, Igor Sakhnov, about how to secure and govern autonomous agents. This blog is part of a new ongoing series where our Deputy CISOs share their thoughts on what is most...