CVE-2025-53767

Azure OpenAI Elevation of Privilege Vulnerability...

CVE-2025-53792

Azure Portal Elevation of Privilege Vulnerability...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: addon-resizer-fips, gke-gcloud-auth-plugin, wave-fips, cloud-provider-azure, gofumpt, kubernetes-dashboard-web, kubebuilder, rook, victoriametrics-fips, beats, blob-csi, loki-fips, fluxcd-kustomize-mutating-webhook, eks-distro-fips, flux, atlantis,...

Azure Linux 3.0 Security Update: httpd (CVE-2025-54090)

The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-54090 advisory. - A bug in Apache HTTP Server 2.4.64 results in all RewriteCond expr ... tests evaluating as true. Users are...

CVE-2025-53792

Azure Portal Elevation of Privilege Vulnerability...

CVE-2025-53767

Azure OpenAI Elevation of Privilege Vulnerability...

CVE-2025-53767 Azure OpenAI Elevation of Privilege Vulnerability

...

CVE-2025-53767

Azure OpenAI CVE-2025-53767 is an elevation-of-privilege vulnerability rated CVSS v3.1 base score 10 (NETWORK, LOW attack complexity, PR NONE, UI NONE, C:H/I:H/A:N, scope CHANGED). It affects Azure OpenAI and can grant elevated rights with no user interaction. Microsoft has published updates via ...

CVE-2025-53767 Azure OpenAI Elevation of Privilege Vulnerability

...

CVE-2025-53792 Azure Portal Elevation of Privilege Vulnerability

...

CVE-2025-53792

CVE-2025-53792: Azure Portal Elevation of Privilege vulnerability with a CRITICAL CVSSv3.1 base score (9.1) and network attack vector. Public details from NVD/Microsoft indicate an improper access control issue in the Azure Portal that could allow an attacker to obtain elevated privileges, potent...

CVE-2025-53792 Azure Portal Elevation of Privilege Vulnerability

...

Azure OpenAI Elevation of Privilege Vulnerability

...

Azure Portal Elevation of Privilege Vulnerability

...

CVE-2025-54882

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...

CVE-2025-54882

CVE-2025-54882 affects Himmelblau, an interoperability suite for Microsoft Azure Entra ID and Intune. From the public records, versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0 store the cloud TGT during logon in the Kerberos credential cache, and the created credential cache collection ...

CVE-2025-54882 Himmelblau's Kerberos credential cache collection is world readable

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...

Azure Linux 3.0 Security Update: edk2 / hvloader (CVE-2023-45231)

The version of edk2 / hvloader installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45231 advisory. - EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing Neighb...

Azure Linux 3.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-49179)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49179 advisory. - A flaw was found in the X Record extension. The...

Azure Linux 3.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-49175)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49175 advisory. - A flaw was found in the X Rendering extension's handling of animated...