CVE-2026-66802

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

CVE-2026-65806

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

CVE-2026-63522

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

CVE-2026-62869

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50516

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-47299

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-62869

CVE-2026-62869 affects Azure Entra ID and related services (Azure Active Directory, Entra ID, Entra Provisioning Service, SRE Agent, etc.). The root cause is insufficient verification of data authenticity, enabling an authorized attacker to perform network spoofing. Affected components include Az...

CVE-2026-62869 Azure Entra ID Spoofing Vulnerability

...

EUVD-2026-56779

Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network...

CVE-2026-62869 Azure Entra ID Spoofing Vulnerability

...

CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-50516

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

EUVD-2026-56778

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50516

CVE-2026-50516 is a Microsoft Azure Kubernetes Service elevation-of-privilege vulnerability. The exposed issue arises from missing authentication for a critical function, enabling a network-based attacker to escalate privileges. Affected products include AKS, Azure Active Directory, Azure SRE Age...

EUVD-2026-56771

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

EUVD-2026-56769

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

CVE-2026-63522

Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...