13785 matches found
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
CVE-2026-50516
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-56778
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-50516
CVE-2026-50516 is a Microsoft Azure Kubernetes Service elevation-of-privilege vulnerability. The exposed issue arises from missing authentication for a critical function, enabling a network-based attacker to escalate privileges. Affected products include AKS, Azure Active Directory, Azure SRE Age...
EUVD-2026-56771
Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
EUVD-2026-56769
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-63522
Azure SQL Database is the affected product for CVE-2026-63522, described as an incorrect permission assignment for a critical resource that allows an authorized attacker to elevate privileges locally. The issue has a base CVSSv3.1 score of 7.8 (HIGH) with LOCAL access, low attack complexity, and ...
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
...
EUVD-2026-56746
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...
EUVD-2026-56592
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...
CVE-2026-65806
CVE-2026-65806 affects Azure CycleCloud. The issue is missing authorization that could allow an attacker with LOW privileges and network access to disclose information, with confidentiality impact rated HIGH. The CVSS v3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N and the base score ...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
...
CVE-2026-70340
Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...
CVE-2026-57104
CVE-2026-57104 is a cross-site scripting (XSS) flaw in Azure Storage Explorer where improper input neutralization during web page generation enables an unauthenticated remote attacker to elevate privileges over a network. Microsoft's MSRC update guide lists a fix; CISA's SSVC assessment shows no ...
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
...