CVE-2024-20679

Azure Stack Hub Spoofing Vulnerability...

CVE-2024-20667

Azure DevOps Server Remote Code Execution Vulnerability...

CVE-2024-20667

Azure DevOps Server Remote Code Execution Vulnerability...

CVE-2024-20679

Azure Stack Hub Spoofing Vulnerability...

Privilege escalation

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability...

Privilege escalation

Azure Connected Machine Agent Elevation of Privilege Vulnerability...

Remote code execution

Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability...

Privilege escalation

Microsoft Azure File Sync Elevation of Privilege Vulnerability...

Spoofing

Azure Stack Hub Spoofing Vulnerability...

Remote code execution

Azure DevOps Server Remote Code Execution Vulnerability...

Privilege escalation

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability...

Spoofing

Microsoft Azure Active Directory B2C Spoofing Vulnerability...

CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

...

CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

...

CVE-2024-21403

CVE-2024-21403 affects Microsoft Azure Kubernetes Service Confidential Containers, describing an Elevation of Privilege in AKS Confidential Containers. The available connected material indicates a privilege-escalation risk within the AKS Confidential Container environment, with a CVSSv3 base scor...

CVE-2024-21397

CVE-2024-21397 — Microsoft Azure File Sync Elevation of Privilege is an Azure File Sync Agent vulnerability where an issue could allow unauthorized users to create files in locations they are not allowed to access. The primary public details describe the impact as an elevation of privileges with ...

CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2024-21376 Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

...

CVE-2024-21376

CVE-2024-21376 affects Microsoft Azure Kubernetes Service Confidential Containers. The issue is described (per PT- security) as insufficient input validation in the deployment/management software, enabling remote attackers to execute arbitrary code. Microsoft’s advisories and rapid7 summaries cla...