CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability

...

CVE-2026-70340

Azure CycleCloud CVE-2026-70340: AMissing authorization vulnerability could allow an authenticated attacker to elevate privileges over a network. The issue affects Azure CycleCloud and is rated HIGH (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). The root cause is insufficient access control, en...

CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability

...

CVE-2026-57104

CVE-2026-57104 is a cross-site scripting (XSS) flaw in Azure Storage Explorer where improper input neutralization during web page generation enables an unauthenticated remote attacker to elevate privileges over a network. Microsoft's MSRC update guide lists a fix; CISA's SSVC assessment shows no ...

CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability

...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

CVE-2026-57104

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-56590

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability

...

EUVD-2026-56591

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability

...

EUVD-2026-56305

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-47299

CVE-2026-47299 involves the Azure Monitor Agent and is due to improper neutralization of special elements used in a command (command injection). The vulnerability could allow an authorized attacker to elevate privileges over a network, with network as the attack vector, no user interaction requir...

CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2026-47299

Improper neutralization of special elements used in a command 'command injection' in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network...

2026-08 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5120229)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

Azure Storage Explorer Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network...

Azure CycleCloud Elevation of Privilege Vulnerability

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

Azure CycleCloud Information Disclosure Vulnerability

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network...

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...