MCS Provisioned VDI shows the wrong Storage Type as HDD

Use MCS to create VDIs on Azure hypervisor and select the storage type as "Standard SSD". After that, the storage type is shown correctly as Standard SSD in Azure Portal. However, when logon VDI and open the Task Manager, the storage type is shown as "HDD"...

KLA62390 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Connected Machine Agen...

Security Updates for Azure Connected Machine Agent (December 2023)

The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.37. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...

Microsoft Power Platform Connector Security Vulnerability

The Microsoft Power Platform Connector is a proxy or wrapper for an API from Microsoft Corporation USA. A security vulnerability exists in Microsoft Power Platform Connector. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and versions are affected...

PT-2023-8027 · Microsoft · Azure Connected Machine Agent

Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to insufficient access control in the Azure Connected Machine Agent, which can be exploited to elevate privileges. Recommendations: At the moment,...

Microsoft Azure Machine Learning Security Vulnerability

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Machine Learning. An attacker exploiting the vulnerability could gain access to sensitive information...

KB5033118: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (December 2023)

The remote Windows host is missing security update 5033118 or Azure HotPatch 5033464. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-36006 - Windows Cloud Files Mini Filter Driver Elevation of...

KB5033466: Servicing stack update for Windows Server 2008 SP2: December 12, 2023

KB5033466: Servicing stack update for Windows Server 2008 SP2: December 12, 2023 REMINDER Windows Server 2008 SP2 Extended Security Updates third and final year of ESU ended on January 10, 2023. Many customers are taking advantage of Azures commitment to security and compliance and have moved to...

USN-6548-1: Linux kernel vulnerabilities

It was discovered that Spectre-BHB mitigations were missing for Ampere processors. A local attacker could potentially use this to expose sensitive information. CVE-2023-3006 It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors i...

The vulnerability of the GSER and HID USB host on Azure RTOS USBX interfaces allows a perpetrator to execute arbitrary code.

The vulnerability of the GSER and HID USB interfaces in Azure RTOS USBX is related to insufficient checking of exclusive states due to the pointer being set to an expired value. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

Microsoft Mitigates Three Vulnerabilities in Azure HDInsight

Summary Summary Microsoft recently remediated one Denial of Service and two Escalation of Privilege vulnerabilities affecting third party components of Azure HDInsight. Access to the target cluster as an authenticated user was a prerequisite for exploitation in all three cases. A successful...

PT-2023-9000 · Microsoft +2 · Azure Uamqp +2

Name of the Vulnerable Software and Affected Versions: Azure uAMQP versions prior to 2024-01-01 Description: The issue is related to an integer overflow or wraparound or memory safety issue in the Azure uAMQP library, which is a general-purpose C library for AMQP 1.0. This library is used by...

Azure File Sync Agent v17.0 Release – December 2023 (KB5023053)

Update for Azure File Sync agent version 17.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

CVE-2023-48697

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...

CVE-2023-48698

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host...

CVE-2023-48696

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include components in host class,...

CVE-2023-48693

Azure RTOS ThreadX is an advanced real-time operating system RTOS designed specifically for deeply embedded applications. An attacker can cause arbitrary read and write due to vulnerability in parameter checking mechanism in Azure RTOS ThreadX, which may lead to privilege escalation. The affected...

CVE-2023-48695

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host and...

CVE-2023-48694

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference and type confusion vulnerabilities in Azure RTOS USBX. The affected components include...

CVE-2023-48316

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to snmp,...