13685 matches found
KLA83574 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure File Sync can be exploited remotely to gain privileges. 2. An...
CVE-2025-29827
Improper Authorization in Azure Automation allows an authorized attacker to elevate privileges over a network...
CVE-2025-29972
Server-Side Request Forgery SSRF in Azure allows an authorized attacker to perform spoofing over a network...
CVE-2025-33072
Improper access control in Azure allows an unauthorized attacker to disclose information over a network...
CVE-2025-33072
Improper access control in Azure allows an unauthorized attacker to disclose information over a network...
CVE-2025-29972
Server-side request forgery ssrf in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network...
CVE-2025-29827
Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network...
CVE-2025-29813 Azure DevOps Elevation of Privilege Vulnerability
...
CVE-2025-29813 Azure DevOps Elevation of Privilege Vulnerability
...
CVE-2025-29813
CVE-2025-29813 is an elevation of privilege vulnerability in Azure DevOps (Azure DevOps Server). The described flaw is an authentication bypass via assumed-immutable data / spoofable identity claims that could allow an unauthorized user to elevate privileges over the network. Connected sources co...
CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability
...
CVE-2025-29827
CVE-2025-29827 — Azure Automation Elevation of Privilege : The Azure Automation service is affected by an improper authorization vulnerability that can allow an authenticated attacker to elevate privileges over the network. Public sources in the provided documents indicate updates/fixes have been...
CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability
...
CVE-2025-29972 Azure Storage Resource Provider Spoofing Vulnerability
...
CVE-2025-29972
CVE-2025-29972 describes a Server-Side Request Forgery (SSRF) in Microsoft Azure’s Storage Resource Provider (SRP) that could allow an authorized attacker to spoof network interactions. Public sources list the affected component as SRP and note the vulnerability enables spoofing of user interface...
CVE-2025-29972 Azure Storage Resource Provider Spoofing Vulnerability
...
CVE-2025-33072
CVE-2025-33072 is an information-disclosure vulnerability in Microsoft Azure caused by improper access control that could allow an unauthenticated network attacker to disclose data. The vulnerability is referenced in multiple sources (NVD, MSRC, NCSC) with consistent assessment of impact on Azure...
CVE-2025-33072 Microsoft msagsfeedback.azurewebsites.net Information Disclosure Vulnerability
...
