13518 matches found
CVE-2026-65816
Azure Arc (Microsoft) is affected by an elevation of privilege vulnerability caused by the use of an incorrectly-resolved name or reference. An unauthorized, unauthenticated attacker can exploit this over the network to gain elevated privileges, with high impact on confidentiality, integrity, and...
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-65770
Azure Managed Instance for Apache Cassandra is affected by an argument injection vulnerability (improper neutralization of argument delimiters in a command) that allows an unauthorized attacker to execute code over a network without any privileges or user interaction. The CVSS 3.1 score is 10.0 (...
CVE-2026-69851
An SSRF vulnerability in Microsoft Entra ID (Azure Active Directory) allows an authorized attacker to elevate privileges over a network. CVSS 9.9 (critical) reflects network access, low complexity, and full confidentiality/integrity/availability impact. Exploitation status and patch details are n...
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
...
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
...
CVE-2026-68789
CVE-2026-68789 is a SQL injection vulnerability in Azure SQL Database that allows an authorized attacker to elevate privileges over a network. The vulnerability is rated CVSS 9.9 (CRITICAL) with a scope change, indicating high impact on confidentiality, integrity, and availability. CISA's SSVC as...
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-69519
Azure Stack HCI has an observable response discrepancy vulnerability allowing an unauthenticated remote attacker to disclose sensitive information over the network. CVSS 3.1 scores it HIGH (8.6) with network attack vector and no privileges required. No patch version or exploitation details are pr...
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
...
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
...
CVE-2026-62834
CVE-2026-62834 is a critical elevation of privilege vulnerability in Azure Data Factory caused by improper verification of a cryptographic signature. An unauthorized attacker can exploit this over the network to elevate privileges, with high impact on both confidentiality and integrity (CVSS 3.1:...
CVE-2026-61625
VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...
CVE-2026-61625 VictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root
VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...
Azure Data Manager for Energy Remote Code Execution Vulnerability
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
Azure Arc Elevation of Privilege Vulnerability
Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network...