EUVD-2026-63629

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

CVE-2026-69543

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

CVE-2026-69543

An SSRF vulnerability in Azure Virtual Machines allows an authorized low-privilege attacker to elevate privileges over a network, with a HIGH CVSS 3.1 base score of 8.5. No patch version, workaround, or exploitation evidence is provided in the documents.

Azure Virtual Machines Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

CVE-2026-69543: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...

PT-2026-79211

Name of the Vulnerable Software and Affected Versions Azure Virtual Machines affected versions not specified Description Server-side request forgery SSRF, a flaw where an attacker induces a server-side application to make requests to an unintended location, allows an authorized attacker to elevat...

EUVD-2026-10586

Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally...

EUVD-2025-24365

Malicious code in bioql PyPI...

EUVD-2025-24276

Malicious code in bioql PyPI...

EUVD-2024-19015

Malicious code in bioql PyPI...

The vulnerability of Azure Virtual Machines, related to lack of access control, allows attackers to carry out spoofing attacks.

The vulnerability of Azure Virtual Machines is related to lack of access control. Exploiting this vulnerability can allow attackers to carry out spoofing attacks...

The vulnerability of Azure Virtual Machines relates to the exposure of information, allowing attackers to gain unauthorized access to protected data.

The vulnerability of Azure Virtual Machines is related to the exposure of information. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2025-49707

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...

CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

Vulnerabilities fixed in Azure products

Microsoft has fixed vulnerabilities in Azure products. The vulnerabilities are related to improper access control mechanisms, allowing authorized attackers to perform local spoofing attacks, obtain elevated privileges, reveal sensitive information and compromise the integrity of systems. This can...

CVE-2025-53781

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...

CVE-2025-49707

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally...

CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability

...

CVE-2025-49707 Azure Virtual Machines Spoofing Vulnerability

...

CVE-2025-49707

CVE-2025-49707 describes an improper access control in Azure Virtual Machines that could allow an authorized attacker to perform spoofing locally. The initial description confirms the vulnerability in Azure VMs, with connected sources noting Microsoft has released fixes for related Azure vulnerab...