190 matches found
Vulnerabilities in Microsoft Azure
Microsoft has identified 4 vulnerabilities in various Azure components. A malicious individual could exploit these vulnerabilities to carry out attacks that can lead to various types of damage, as mentioned in the table below. The vulnerability with identifier CVE-2026-69854 has a CVSS score of...
CVE-2026-62895
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-73168
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-62895
Azure Arc SQL Server Extension is affected by a permissive cross-domain policy that permits untrusted domains, enabling an elevation of privilege over the network. The vulnerability requires user interaction and no prior privileges (CVSS 3.1: 8.8 HIGH , AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The r...
Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-63627
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-63621
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-69555
Azure Arc is affected by an incorrect authorization flaw that allows an unauthenticated, remote attacker to elevate privileges over the network. The vulnerability is rated CVSS 3.1: 10.0 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating high confidentiality and integrity...
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-65816
Azure Arc (Microsoft) is affected by an elevation of privilege vulnerability caused by the use of an incorrectly-resolved name or reference. An unauthorized, unauthenticated attacker can exploit this over the network to gain elevated privileges, with high impact on confidentiality, integrity, and...
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
...
Azure Arc Elevation of Privilege Vulnerability
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
Azure Arc Elevation of Privilege Vulnerability
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
PT-2026-79201
Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description An issue involving the use of an incorrectly-resolved name or reference allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
PT-2026-79212
Name of the Vulnerable Software and Affected Versions Azure Arc affected versions not specified Description Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...
