Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Microsoft ACI Confidential Containers is a Microsoft credentials container. A security vulnerability exists in Microsoft ACI Confidential Containers that stems from an improper design and can be exploited by an attacker to obtain sensitive information...

CVE-2026-26122 Microsoft ACI Confidential Containers Information Disclosure Vulnerability

...

CVE-2026-26122

Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2026-23651

CVE-2026-23651 : A permissive regular expression in Azure Compute Gallery allows an authorized local attacker to elevate privileges. The entry provides a CVSS v3.1 base score of 6.7 (Medium), with local attack vector, high privileges required, no user interaction, and high impact on confidentiali...

CVE-2026-21522

Azure Compute Gallery is affected by CVE-2026-21522 due to improper neutralization of special elements used in a command, enabling an authorized attacker to achieve local privilege escalation. The issue concerns command injection in the Azure Compute Gallery workflow, with a CVSS v3.1 base score ...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

KLA90871 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...