13697 matches found
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. The vulnerabilities allow a malicious party to impersonate another user, gain elevated privileges and potentially execute arbitrary code. Some of the vulnerabilities are in development tooling and are not readily accessible to...
CVE-2024-38092
Azure CycleCloud Elevation of Privilege Vulnerability...
CVE-2024-38092
Azure CycleCloud Elevation of Privilege Vulnerability...
CVE-2024-38086
Azure Kinect SDK Remote Code Execution Vulnerability...
CVE-2024-38086
Azure Kinect SDK Remote Code Execution Vulnerability...
CVE-2024-35266
Azure DevOps Server Spoofing Vulnerability...
CVE-2024-35266
Azure DevOps Server Spoofing Vulnerability...
CVE-2024-35267
Azure DevOps Server Spoofing Vulnerability...
CVE-2024-35267
Azure DevOps Server Spoofing Vulnerability...
CVE-2024-35261
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...
CVE-2024-35261
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...
CVE-2024-38092 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2024-38092
CVE-2024-38092 is an Elevation of Privilege vulnerability in Microsoft Azure CycleCloud. The Azure CycleCloud product is affected; CVE details indicate a privilege escalation path, with a CVSSv3 base score of 8.8 (High) and exploitability characteristics (network access, low attack complexity, lo...
CVE-2024-38092 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2024-35267 Azure DevOps Server Spoofing Vulnerability
...
CVE-2024-35267
CVE-2024-35267 is Azure DevOps Server Spoofing Vulnerability. Connected docs confirm a vulnerability in Azure DevOps Server enabling spoofing/impersonation of other users (CVE-2024-35267; CVSSv3 base 7.6, AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L). Microsoft’s accompanying advisories indicate updates a...
CVE-2024-35267 Azure DevOps Server Spoofing Vulnerability
...
CVE-2024-35266 Azure DevOps Server Spoofing Vulnerability
...