CVE-2026-33843 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

...

CVE-2026-33843

CVE-2026-33843 affects Microsoft Azure Active Directory B2C. A authentication bypass via an alternate path or channel could allow an unauthorized attacker to elevate privileges over a network. The CVSSv3.1 base score is 9.1 (CRITICAL) with high impact on confidentiality and integrity, and no user...

CVE-2026-33843 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability

...

EUVD-2026-31519

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability

...

EUVD-2026-31516

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2026-26147

Azure Stack HCI Information Disclosure Vulnerability (CVE-2026-26147) can arise from improper input validation in Azure Compute Gallery, enabling a network-based disclosure by an authorized attacker. Impact: information disclosure; confidentiality impact HIGH, attack vector NETWORK, privileges re...

CVE-2026-26147

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability

...

CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability

...

EUVD-2026-31514

Improper authentication in Azure Resource Manager ARM allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability

...

CVE-2026-47280

CVE-2026-47280 describes an elevation of privilege in Azure Resource Manager due to improper authentication. The vulnerability is network-exploitable with no authentication or user interaction required, granting attacker HIGH integrity, confidentiality, and availability impact. CVSS 3.1 base scor...

CVE-2026-47280

Improper authentication in Azure Resource Manager ARM allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-31510

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network...

EUVD-2026-31509

Authorization bypass through user-controlled key in Azure Privileged Identity Management PIM allows an authorized attacker to elevate privileges over a network...

CVE-2026-40411

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network...

CVE-2026-40411

Azure Virtual Network Gateway is affected by a Remote Code Execution vulnerability (CVE-2026-40411) due to improper input validation. An attacker with network access and low privileges can trigger code execution on the gateway, given an authentication context that is considered authorized. The CV...

CVE-2026-40411 Azure Virtual Network Gateway Remote Code Execution Vulnerability

...

CVE-2026-35430

CVE-2026-35430 covers an authorization bypass in Azure Privileged Identity Management (PIM) that permits an authorized attacker to elevate privileges over the network via a user-controlled key. Root cause: authorization bypass within PIM. Impact: high, enabling privilege escalation with network a...