SUSE-SU-2024:3194-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release bsc1228576. - CVE-2023-52489: Fix race in accessing memorysection-usage bsc1221326. - CVE-2024-43821: Fix a...

SUSE-SU-2024:3190-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate bsc1229454. - CVE-2024-36936: Touch soft lockup during memory accept bsc1225773. -...

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

September 10, 2024—KB5043138 (Monthly Rollup)

None None...

KB5042209 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: September 10, 2024

None None...

Azure CycleCloud Remote Code Execution Vulnerability

...

Azure Stack Hub Elevation of Privilege Vulnerability

...

September 10, 2024—KB5043055 (OS Build 25398.1128)

None None...

September 10, 2024—KB5043135 (Monthly Rollup)

None None...

September 10, 2024—KB5043125 (Monthly Rollup)

None None...

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

Azure Web Apps Elevation of Privilege Vulnerability

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...

Azure Stack Hub Elevation of Privilege Vulnerability

...

PT-2024-27897 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide...

Microsoft Azure Stack 访问控制错误漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft Corporation USA. The product supports building and deploying hybrid applications. An access control error vulnerability exists in Microsoft Azure Stack. An attacker could exploit...

Microsoft Azure 输入验证错误漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Azure. An attacker can exploit this vulnerability to elevate privileges. No information about this vulnerability is available ...

PT-2024-27904 · Microsoft · Azure Stack Hub

Name of the Vulnerable Software and Affected Versions: Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure Stack Hub. There is no information provided about the estimated number of potentially affected devices...

PT-2024-27899 · Microsoft · Azure Web Apps

Name of the Vulnerable Software and Affected Versions: Azure Web Apps affected versions not specified Description: An authenticated attacker can exploit an improper authorization issue in Azure Web Apps to elevate privileges over a network. Recommendations: At the moment, there is no information...

Microsoft Azure 后置链接漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Azure. An attacker can exploit this vulnerability to elevate privileges. No information about this vulnerability is available at this time, s...

KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows...