13370 matches found
CVE-2026-35430
Authorization bypass through user-controlled key in Azure Privileged Identity Management PIM allows an authorized attacker to elevate privileges over a network...
CVE-2026-40411 Azure Virtual Network Gateway Remote Code Execution Vulnerability
...
CVE-2026-35430 Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
...
CVE-2026-35430 Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
...
CVE-2026-40412 Azure Orbital Spatio Remote Code Execution Vulnerability
...
EUVD-2026-31511
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network...
CVE-2026-40412
Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network...
CVE-2026-40412
Azure Orbital Spatio has a Remote Code Execution vulnerability (CVE-2026-40412) due to unrestricted upload of a file with a dangerous type, allowing an unauthenticated attacker to execute code over the network. Affected product: Azure Orbital Spatio. Impact is high for confidentiality, integrity,...
CVE-2026-40412 Azure Orbital Spatio Remote Code Execution Vulnerability
...
USN-8280-2: Linux kernel (Azure)vulnerabilities
It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...
USN-8281-2 linux-azure-4.15, linux-azure-fips vulnerabilities
It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...
MAL-2026-4677 Malicious code in swift-optimizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c54f35da6df5cef65715d49fb7942aff442ee9a0cb486862031e5009277db3a On npm install, [email protected] runs scripts/install-binary.js as a postinstall hook. The script is a hand-rolled JavaScript bytecode VM 123 KB...
Microsoft Azure Virtual Network Gateway 输入验证错误漏洞
Microsoft Azure Virtual Network Gateway is a cloud gateway service provided by Microsoft that supports VPN and cross-network connectivity. There is an input validation vulnerability in Microsoft Azure Virtual Network Gateway, which stems from improper input validation. This vulnerability may allo...
Microsoft Azure Privileged Identity Management 安全漏洞
Microsoft Azure Privileged Identity Management is a cloud-based privilege account and permission lifecycle management service provided by Microsoft. There is a security vulnerability in Microsoft Azure Privileged Identity Management, which stems from bypassing authorization through user-controlle...
Microsoft Azure Entra ID 安全漏洞
Microsoft Azure Entra ID is a cloud-based identity and access management service provided by Microsoft Corporation in the United States. There is a security vulnerability in Microsoft Azure Entra ID, which stems from improper permission management. This vulnerability could allow unauthorized...
Microsoft Azure Orbital Spatio 代码问题漏洞
Microsoft Azure Orbital Spatio is a satellite geospatial data processing and analysis platform developed by Microsoft Corporation. There is a code vulnerability in Microsoft Azure Orbital Spatio, which stems from unlimited upload of dangerous types of files. This vulnerability could allow...
Microsoft Azure Resource Manager 授权问题漏洞
Microsoft Azure Resource Manager is a deployment and management service provided by the American company Microsoft. There is an authorization issue vulnerability in Microsoft Azure Resource Manager, which stems from improper authentication practices. This vulnerability could allow unauthorized...
Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability
Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network...