68 matches found
EUVD-2026-82599
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-83946
CVE-2026-83946 is a cross-site scripting (XSS) vulnerability in Azure Portal , caused by improper neutralization of input during web page generation. An unauthorized attacker with network access can exploit this to perform spoofing , achieving high confidentiality impact and low integrity impact ...
Azure Portal Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Portal allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-62835
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...
EUVD-2026-48737
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...
CVE-2026-62835
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...
CVE-2026-62835
Azure Portal Information Disclosure vulnerability (CVE-2026-62835) stems from improper authorization, allowing an unauthenticated attacker to disclose information over a network. The available sources report CVSS v3.1 base score 9.3 (CRITICAL), with NETWORK attack vector, LOW complexity, NO privi...
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
...
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
...
PT-2026-64411
Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network...
KLA91175 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability i...
GHSA-Q4H4-GMJ2-QVW2 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-servicediscovery, syft, crossplane-provider-aws-chime-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-chime, crossplane-aws-provider, crossplane-provider-aws-directconnect, docker-compose, fscrypt,...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-servicediscovery, syft, crossplane-provider-aws-chime-fips, crossplane-provider-aws-ecr-fips, crossplane-provider-aws-chime, crossplane-aws-provider, crossplane-provider-aws-directconnect, docker-compose, fscrypt,...
CVE-2026-42834
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-42834
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-42834
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-42834 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
...
CVE-2026-42834 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
...
CVE-2026-42834
CVE-2026-42834 describes an elevation-of-privilege vulnerability in Windows Admin Center within Azure Portal caused by improper link resolution before file access ("link following"). An authorized attacker could exploit this locally to gain higher privileges on the affected system. Affected compo...