13423 matches found
CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2026-40381
CVE-2026-40381: Improper access control in the Azure Connected Machine Agent enables a locally authenticated attacker to elevate privileges. The vulnerability affects the Azure Connected Machine Agent; attacker must have local access and low privileges, with no user interaction required. The CVSS...
CVE-2026-41086
Technical details about CVE-2026-41086 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2026-41086 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
...
CVE-2026-41086 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
...
CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability
...
CVE-2026-33833
Azure Machine Learning is affected where the issue occurs in the downstream component’s output handling, described as an improper neutralization of special elements that enables network spoofing. The CVE-2026-33833 entry notes an attacker could exploit this via a network vector with no user inter...
CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability
...
CVE-2026-33117
The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability
...
CVE-2026-33117
Azure SDK for Java is affected by CVE-2026-33117: improper authentication allows a remote attacker to bypass a security feature over the network. The issue has a CVSS v3.1 base score of 9.1 (CRITICAL) with high impact to confidentiality and integrity, no availability impact, and requires no privi...
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability
...
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2026-32204
Azure Monitor Agent is affected by CVE-2026-32204. The vulnerability involves external control of a file name or path in the agent, enabling an authorized, local attacker to elevate privileges. The CVE has a high impact (C:H, I:H, A:H) with local attack vector and low attack complexity, requiring...
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2026-40379
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network...
Defending consumer web properties against modern DDoS attacks
If you own, create, or maintain online services and web portals, you’re probably aware of the dramatic upswing in DDoS attacks on your domains. AI has democratized tooling not just for us but for threat actors as well. DDoS in this era has extended from simple bandwidth saturation to sophisticate...
