15169 matches found
Security Updates for Azure CycleCloud < 8.9.1
The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-57969 - An improper input...
USN-8529-2 linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerabilities
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...
CVE-2026-64192 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp...
GHSA-3HVR-PHFH-X26G vulnerabilities
Vulnerabilities for packages: linux-azure, linux-gcp...
CLEANSTART-2026-KL91146 Security fixes in velero-plugin-for-microsoft-azure-fips 1.14.2-r2
Package velero-plugin-for-microsoft-azure-fips version 1.14.2-r2 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...
azurelinux v3.0.20260809-3.0
Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...
USN-8635-1 linux-azure vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...
CVE-2026-73298
The CVE-2026-73298 entry concerns the Microsoft Container Migration Solution Accelerator (multi-service AI-driven migration tool) with vulnerability in version 2.1.2 and earlier. The issue is an authenticated IDOR (Insecure Direct Object Reference) that permits reading, writing, and deleting proc...
CVE-2026-66378
An authenticated user without repository read permission may access private NuGet metadata under specific conditions...
Vulnerabilities in Microsoft Azure
Microsoft has identified vulnerabilities in various Azure components. Malicious actors could exploit these vulnerabilities to carry out attacks that can lead to the types of damages listed in the table below. The vulnerability with the identifier CVE-2026-56162, which has a CVSS score of 10.0, an...
The vulnerability of the cloud service for storing immutable confidential records and logs in Azure Confidential Ledger allows a perpetrator to execute arbitrary code.
The vulnerability of cloud services for storing confidential records and logs in Azure Confidential Ledger is related to the use of dangerous methods or functions. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code...
The vulnerability of Azure Service Bus, a cloud-based asynchronous messaging platform, is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code.
The vulnerability of Azure Service Bus, a cloud-based asynchronous messaging platform, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
The vulnerability of Azure SQL Managed Instance, a PaaS service, arises from insufficient network connection restrictions for specified endpoints. This allows attackers to escalate their privileges.
The vulnerability of Azure SQL Managed Instance PaaS is related to insufficient network connection restrictions for specified endpoints. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Azure Active Directory identity management and protection platform, related to modifications of expected data, allows attackers to escalate their privileges.
The vulnerability of the Azure Active Directory identity management and protection platform is related to modifications of assumed data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps relates to operational systems running on Windows. This vulnerability stems from deficiencies in access control, allowing attackers to exploit it to disclose sensitive information.
The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps, when operating on Windows operating systems, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive...
The vulnerability of the AI-based tool for automatic analysis of root causes and effective response to incidents in Azure SRE Agent, related to the lack of authentication, allows intruders to elevate their privileges.
The vulnerability of AI-based tools for automatic analysis of root causes and effective response to incidents in Azure SRE operations is related to the lack of authentication. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
The vulnerability of the Azure SQL Database cloud relational database, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.
The vulnerability of Azure SQL Database cloud relational database is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
AzureHound v3.1.0-rc1
AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...