13691 matches found
CVE-2026-68782
An SQL injection flaw in Azure SQL Database allows an authenticated, low-privilege network attacker to elevate privileges, with CVSS 9.9 (Critical) reflecting full confidentiality, integrity, and availability impact. Microsoft's update guide is the primary remediation reference; no patch version ...
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability
...
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability
...
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability
...
CVE-2026-66800
An SSRF flaw in Azure Data Factory lets an unauthenticated network attacker disclose sensitive information (CVSS 8.6 HIGH, scope changed). No exploit details are provided; Microsoft has published an update guide at the referenced MSRC link. Monitor for patch details and apply Azure Data Factory u...
CVE-2026-66309
CVE-2026-66309 is a Critical (CVSS 9.1) elevation-of-privilege flaw in Azure SQL Database; an authenticated, high-privilege attacker can escalate privileges over the network, affecting confidentiality, integrity, and availability. No affected versions, root cause, or patch details are provided in...
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-65816
Azure Arc (Microsoft) is affected by an elevation of privilege vulnerability caused by the use of an incorrectly-resolved name or reference. An unauthorized, unauthenticated attacker can exploit this over the network to gain elevated privileges, with high impact on confidentiality, integrity, and...
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
...
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-65770
Azure Managed Instance for Apache Cassandra is affected by an argument injection vulnerability (improper neutralization of argument delimiters in a command) that allows an unauthorized attacker to execute code over a network without any privileges or user interaction. The CVSS 3.1 score is 10.0 (...
CVE-2026-69851
An SSRF vulnerability in Microsoft Entra ID (Azure Active Directory) allows an authorized attacker to elevate privileges over a network. CVSS 9.9 (critical) reflects network access, low complexity, and full confidentiality/integrity/availability impact. Exploitation status and patch details are n...
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
...
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-68789
CVE-2026-68789 is a SQL injection vulnerability in Azure SQL Database that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 9.9 (CRITICAL) with a scope change, indicating high impact on confidentiality, integrity, and availability. CISA's SSVC as...