13697 matches found
CVE-2024-38109
CVE-2024-38109 – Azure Health Bot Elevation of Privilege is an authenticated SSRF vulnerability in Microsoft Azure Health Bot that can allow an attacker to elevate privileges over a network. The vulnerability is documented in Microsoft’s advisory (CVE-2024-38109) and is referenced in multiple fee...
CVE-2024-38109 Azure Health Bot Elevation of Privilege Vulnerability
...
CVE-2024-38109 Azure Health Bot Elevation of Privilege Vulnerability
...
CVE-2024-38195 Azure CycleCloud Remote Code Execution Vulnerability
...
CVE-2024-38195 Azure CycleCloud Remote Code Execution Vulnerability
...
CVE-2024-38195
CVE-2024-38195 is an Azure CycleCloud remote code execution vulnerability identified by Microsoft. Connected sources confirm an access-control related flaw that could enable an attacker to execute arbitrary code on affected systems. Reported affected products/versions include Azure CycleCloud 8.0...
CVE-2024-38158 Azure IoT SDK Remote Code Execution Vulnerability
...
CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-38158
CVE-2024-38158 affects the Azure IoT SDK. Connected sources indicate the issue involves a memory-after-free condition that can lead to remote code execution in affected Azure IoT SDK components. Some third‑party advisories describe it as enabling arbitrary code execution on vulnerable systems, wi...
CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-38162
CVE-2024-38162 concerns the Azure Connected Machine Agent with an Elevation of Privilege vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local-exploit, low-privilege requirement leading to high impact on confidentiality, integrity, and availability. Multiple s...
CVE-2024-38158 Azure IoT SDK Remote Code Execution Vulnerability
...
CVE-2024-38157 Azure IoT SDK Remote Code Execution Vulnerability
...
CVE-2024-38157 Azure IoT SDK Remote Code Execution Vulnerability
...
CVE-2024-38157
Azure IoT SDK Remote Code Execution Vulnerability (CVE-2024-38157) affects the Azure IoT SDK. CVSSv3.1 base score 7.0 with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. Exploitation requires local access; impact includes compromise of confidentiality, integrity and availability. Connected documents...
CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-38098
CVE-2024-38098 (Azure Connected Machine Agent Elevation of Privilege) affects the Azure Connected Machine Agent. Reported CVSSv3.1 base score 7.8 (LOCAL, LOW Privileges, NONE user interaction; Confidentiality/Integrity/Availability HIGH). Connected documents indicate an elevation-of-privilege fla...