CVE-2024-38188

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...

2024-09 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5042880)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability

...

CVE-2024-38194

CVE-2024-38194 represents an Elevation of Privilege vulnerability in Azure Web Apps caused by improper authorization. The CVE is cited as enabling an authenticated attacker to elevate privileges over a network. Connected sources corroborate Azure Web Apps as the affected product and indicate Micr...

CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability

...

CVE-2024-43470

CVE-2024-43470 affects Microsoft Azure Network Watcher VM Agent. Connected sources describe it as an Elevation of Privilege affecting the Azure Network Watcher VM Extension/Agent, with impact described as access to sensitive data and total impact in some listings. The CVSS v3.1 base metrics in th...

CVE-2024-43470 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

CVE-2024-43470 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

CVE-2024-43469

CVE-2024-43469 affects Microsoft Azure CycleCloud. The vulnerability enables remote code execution due to a disclosure of storage credentials, allowing an authenticated, remote attacker to bypass authentication and execute arbitrary commands with root privileges. CVSSv3.1 base score is 8.8 (HIGH)...

CVE-2024-43469 Azure CycleCloud Remote Code Execution Vulnerability

...

CVE-2024-43469 Azure CycleCloud Remote Code Execution Vulnerability

...

CVE-2024-38220 Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2024-38188 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

CVE-2024-38188

CVE-2024-38188 affects Microsoft Azure Network Watcher VM Extension (Windows). Reports from Nessus plugins and advisories indicate an elevation of privilege vulnerability in the Azure Network Watcher VM Agent/Extension prior to specific updated versions (e.g., 1.4.3563.1 and 1.4.3422.1 in differe...

CVE-2024-38220

CVE-2024-38220: Azure Stack Hub Elevation of Privilege — Elevation of privilege in Azure Stack Hub; CVSSv3.1 base score 9.0 (Network/AV:N, AC:L, PR:L, UI:R, S:C, C:H, I:H, A:H). Exploitation requires user interaction and low privileges; impact is high with changed scope. Affected product: Azure S...

CVE-2024-38220 Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2024-38188 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

CVE-2024-38216 Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2024-38216 Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2024-38216

CVE-2024-38216 is an Elevation of Privilege vulnerability in Azure Stack Hub . Connected sources confirm affected product and that patches exist via Microsoft Update (KB/MSRC advisory). The issue enables attackers to gain increased rights on the compromised system, potentially compromising confid...