Azure Arc Installer Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Arc allows an authorized attacker to elevate privileges locally...

Azure Promptflow Remote Code Execution Vulnerability

Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network...

March 11, 2025—KB5053603 (OS Build 20348.3328)

None None...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected: Azure promptflow-core,Azu...

PT-2025-10844

Name of the Vulnerable Software and Affected Versions: Azure Arc affected versions not specified Description: The issue is related to improper neutralization of special elements used in a command, also known as 'command injection', in Azure Arc. This allows an authorized attacker to elevate...

PT-2025-10831

Name of the Vulnerable Software and Affected Versions Azure PromptFlow affected versions not specified Description The issue is related to improper isolation or compartmentalization in Azure PromptFlow, allowing an unauthorized attacker to execute code over a network. Recommendations At the momen...

PT-2025-13856 · Microsoft · Azure Playwright

Name of the Vulnerable Software and Affected Versions: Azure Playwright affected versions not specified Description: The issue is related to improper authorization in Azure Playwright, allowing an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, there is...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50302)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50302 advisory. - In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report...

Microsoft Azure 命令注入漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A command injection vulnerability exists in Microsoft Azure. An attacker can elevate privileges by exploiting this vulnerability...

Ratify 授权问题漏洞

Ratify is an artifact approval framework CNCF sandbox from Ratify open source. An authorization issue vulnerability exists in Ratify version 1.2.3 and prior to version 1.3.2 that stems from the Azure Authentication Provider not verifying that the target registry is ACR, which could lead to misuse...

PT-2025-10796

Name of the Vulnerable Software and Affected Versions Azure Agent Installer affected versions not specified Description The issue is related to improper privilege management in the Azure Agent Installer, which allows an authorized attacker to elevate privileges locally. Recommendations At the...

PT-2025-10803

Name of the Vulnerable Software and Affected Versions: Azure Command Line Integration CLI affected versions not specified Description: The issue is related to improper neutralization of special elements used in a command, also known as 'command injection', in Azure Command Line Integration CLI...

Microsoft Azure 安全漏洞

Microsoft Azure Agent Installer for Backup and Site Recovery provides disaster recovery solutions for local computers and Azure VMs. An elevation of privilege vulnerability exists in Microsoft Azure Agent Installer for Backup and Site Recovery, which can be exploited by an attacker to elevate...

Microsoft Azure 命令注入漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An elevation of privilege vulnerability exists in Microsoft Azure Arc Installer, which can be exploited by an attacker to elevate privileges...

KLA81540 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Agent can be exploit...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56723)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56723 advisory. - In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain f...

Azure Linux 3.0 Security Update: kernel (CVE-2024-53227)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53227 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Fix use-after-free in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-53096)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53096 advisory. - In the Linux kernel, the following vulnerability has been resolved: mm: resolve faulty mmapregion error path...

Azure Linux 3.0 Security Update: kernel (CVE-2024-53180)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53180 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Add sanity NULL check for the...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56724)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56724 advisory. - In the Linux kernel, the following vulnerability has been resolved: mfd: intelsocpmicbxtwc: Use IRQ domain f...