15169 matches found
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
EUVD-2026-56746
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
CVE-2026-65806
CVE-2026-65806 affects Azure CycleCloud. The issue is missing authorization that could allow an attacker with LOW privileges and network access to disclose information, with confidentiality impact rated HIGH. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N and the base score ...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
EUVD-2026-56592
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
CVE-2026-57104
CVE-2026-57104 is a cross-site scripting (XSS) flaw in Azure Storage Explorer where improper input neutralization during web page generation enables an unauthenticated remote attacker to elevate privileges over a network. Microsoft's MSRC update guide lists a fix; CISA's SSVC assessment shows no ...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...
CVE-2026-57104
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-56590
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-56591
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-47299
CVE-2026-47299 involves the Azure Monitor Agent and is due to improper neutralization of special elements used in a command (command injection). The vulnerability could allow an authorized attacker to elevate privileges over a network, with network as the attack vector, no user interaction requir...
CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability
...