13518 matches found
EUVD-2026-63624
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
PT-2026-79396
Server-side request forgery ssrf in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69855
Server-side request forgery ssrf in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network...
CVE-2026-69519
Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network...
CVE-2026-69851
Server-side request forgery ssrf in Azure Active Directory allows an authorized attacker to elevate privileges over a network...
CVE-2026-69543
Server-side request forgery ssrf in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network...
CVE-2026-69555
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69400
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69419
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
CVE-2026-68782
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
CVE-2026-68789
Improper neutralization of special elements used in an sql command 'sql injection' in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
CVE-2026-66800
Server-side request forgery ssrf in Azure Data Factory allows an unauthorized attacker to disclose information over a network...
CVE-2026-66309
Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network...
CVE-2026-65816
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65770
Improper neutralization of argument delimiters in a command 'argument injection' in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network...
CVE-2026-62834
Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-69855
CVE-2026-69855 is a server-side request forgery (SSRF) vulnerability in Microsoft Copilot in Azure that allows an authorized attacker to disclose information over a network. The CVSS v3.1 base score is 7.7 (HIGH) , reflecting a network attack vector, low complexity, low privileges required, no us...
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability
...
