13691 matches found
CVE-2025-26627
Improper neutralization of special elements used in a command 'command injection' in Azure Arc allows an authorized attacker to elevate privileges locally...
CVE-2025-24986
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...
CVE-2025-24986
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...
CVE-2025-24049
Improper neutralization of special elements used in a command 'command injection' in Azure Command Line Integration CLI allows an unauthorized attacker to elevate privileges locally...
CVE-2025-24049
Improper neutralization of special elements used in a command 'command injection' in Azure Command Line Integration CLI allows an unauthorized attacker to elevate privileges locally...
CVE-2025-21199
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-21199
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally...
2025-03 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5053638)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
CVE-2025-26627 Azure Arc Installer Elevation of Privilege Vulnerability
...
CVE-2025-26627 Azure Arc Installer Elevation of Privilege Vulnerability
...
CVE-2025-26627
CVE-2025-26627 affects Microsoft Azure Arc Installer. The issue is an improper neutralization of special elements in a command (command injection) that allows an authorized local attacker to elevate privileges. The root cause is described across sources as a command injection vulnerability in Azu...
CVE-2025-24049 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
...
CVE-2025-24049 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
...
CVE-2025-24049
Azure CLI Core on SUSE SLES12/15 (and openSUSE) Vulnerability: CVE-2025-24049 – Improper neutralization of special elements used in a command (command injection) in Azure CLI integration could allow a local attacker to elevate privileges. Affected components: azure-cli-core packages on SUSE SLES1...
CVE-2025-21199
Azure Agent Installer for Backup and Site Recovery is affected by CVE-2025-21199 due to improper privilege management, allowing an authorized attacker to elevate privileges locally. The issue targets the Azure Agent Installer component used for disaster recovery, with a CVSSv3.1 base score of 6.7...
CVE-2025-21199 Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
...
CVE-2025-21199 Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
...
CVE-2025-24986 Azure Promptflow Remote Code Execution Vulnerability
...