CVE-2024-35266 Azure DevOps Server Spoofing Vulnerability

...

CVE-2024-35266

Azure DevOps Server Spoofing Vulnerability (CVE-2024-35266) affects Microsoft Azure DevOps Server/TFS. The incident arises from a spoofing flaw in the server, enabling a threat actor to impersonate another user over the network. The CVSS v3.1 base score is 7.6 (HIGH), with network access required...

CVE-2024-35261

CVE-2024-35261 affects Microsoft Azure Network Watcher VM Extension. Public sources indicate the Windows VM Extension is vulnerable when installed below version 1.4.3422.1, with a local elevation-of-privilege flaw that could grant high-impact access (confidentiality, integrity, and availability) ...

CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2024-38086 Azure Kinect SDK Remote Code Execution Vulnerability

...

CVE-2024-38086

CVE-2024-38086 affects the Microsoft Azure Kinect SDK. Connected sources indicate the vulnerability is an RCE in Azure Kinect SDK prior to version 1.4.2 (update to 1.4.2 or later). The CVE’s metrics show a physical attack vector, required high attack complexity, no privileges required, no user in...

CVE-2024-38086 Azure Kinect SDK Remote Code Execution Vulnerability

...

Azure File Sync Agent v18.2 Release – July 2024 (KB5023059)

Update Rollup for Azure File Sync agent version 18.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.2 Release – July 2024 (KB5023059)

Update Rollup for Azure File Sync agent version 18.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v18.2 Release – July 2024 (KB5023059)

Update Rollup for Azure File Sync agent version 18.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

SUSE-SU-2024:2372-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47089: kfence: fix memory leak when cat kfence objects bsc1220958. - CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek bsc1225391. -...

SUSE-SU-2024:2360-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47103: net: sock: preserve kabi for sock bsc1221010. - CVE-2021-47191: Fix out-of-bound read in respreadcap16 bsc1222866. - CVE-2021-47267: usb: fix...

Azure DevOps Server Spoofing Vulnerability

...

Azure Kinect SDK Remote Code Execution Vulnerability

...

Azure CycleCloud Elevation of Privilege Vulnerability

...

KB5040944 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: July 9, 2024

None None...

Azure DevOps Server Spoofing Vulnerability

...

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

Microsoft Azure DevOps Server Security Vulnerability

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. An attacker exploits...

Microsoft SQL Server Security Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...