15168 matches found
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
CVE-2026-65770
Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...
CVE-2026-62834
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability
...
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability
...
CVE-2026-69855
CVE-2026-69855 is a server-side request forgery (SSRF) vulnerability in Microsoft Copilot in Azure that allows an authorized attacker to disclose information over a network. The CVSS v3.1 base score is 7.7 (HIGH) , reflecting a network attack vector, low complexity, low privileges required, no us...
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability
...
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability
...
CVE-2026-69543
An SSRF vulnerability in Azure Virtual Machines allows an authorized low-privilege attacker to elevate privileges over a network, with a HIGH CVSS 3.1 base score of 8.5. No patch version, workaround, or exploitation evidence is provided in the documents.
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-69555
Azure Arc is affected by an incorrect authorization flaw that allows an unauthenticated, remote attacker to elevate privileges over the network. The vulnerability is rated CVSS 3.1: 10.0 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating high confidentiality and integrity...
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-69400
Azure Logic Apps path traversal flaw allows unauthenticated network attackers to elevate privileges. CVSS 9.6 (Critical) with high confidentiality, integrity, and availability impact. Microsoft Security Response Center is tracking the issue at the linked update guide; no patch version or exploita...
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability
...
CVE-2026-69419
An integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code remotely. Microsoft's update guide is the reference; no specific affected version, patch, or exploit details are provided in the documents.