45 matches found
EUVD-2026-63629
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543
An SSRF vulnerability in Azure Virtual Machines allows an authorized low-privilege attacker to elevate privileges over a network, with a HIGH CVSS 3.1 base score of 8.5. No patch version, workaround, or exploitation evidence is provided in the documents.
Azure Virtual Machines Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
PT-2026-79211
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
EUVD-2026-10586
Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...
EUVD-2025-24365
Malicious code in bioql PyPI...
EUVD-2025-24276
Malicious code in bioql PyPI...
EUVD-2024-19015
Malicious code in bioql PyPI...
CVE-2025-49707
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...
CVE-2025-53781
Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...
Vulnerabilities fixed in Azure products
Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...
CVE-2025-53781
Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...
CVE-2025-49707
Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...
CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability
...
CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability
...
CVE-2025-49707
CVE-2025-49707 describes an improper access control in Azure Virtual Machines that could allow an authorized attacker to perform spoofing locally. The initial description confirms the vulnerability in Azure VMs, with connected sources noting Microsoft has released fixes for related Azure vulnerab...
CVE-2025-53781 Azure Virtual Machines Information Disclosure Vulnerability
...