Malicious code in com.microsoft.azure.spatial-anchors-sdk.ios (npm)

The package com.microsoft.azure.spatial-anchors-sdk.ios was found to contain malicious code...

MAL-2025-17327 Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

Malicious code in azure-o849q-lxz68-flora-project (npm)

The package azure-o849q-lxz68-flora-project was found to contain malicious code...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-49707

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...

CVE-2025-53729

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

Azure Linux 3.0 Security Update: libsoup (CVE-2025-4948)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-4948 advisory. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly...

MAL-2025-6865 Malicious code in azure-documentdb-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ae212af083dc32114fe6584d59ab57ac5b5c3b77d59d83cd62af05f8706cdf0 The OpenSSF Package Analysis project identified 'azure-documentdb-node' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

Malicious code in azure-documentdb-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ae212af083dc32114fe6584d59ab57ac5b5c3b77d59d83cd62af05f8706cdf0 The OpenSSF Package Analysis project identified 'azure-documentdb-node' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

Vulnerabilities fixed in Azure products

Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...

Patch Tuesday: Microsoft Fixes 107 Vulnerabilities, Including 13 RCE Flaws

Microsoft’s August Patch Tuesday fixes 107 vulnerabilities, including 13 critical RCE flaws, impacting Windows, Office, Azure, and more,…...

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

CVE-2025-53793

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network...

CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-53765

Exposure of private personal information to an unauthorized actor in Azure Stack allows an authorized attacker to disclose information locally...

CVE-2025-53729

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...

CVE-2025-53729

Improper access control in Azure File Sync allows an authorized attacker to elevate privileges locally...