Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, grant themselves elevated privileges or gain access to sensitive data. Azure Entra ID: |----------------|------|-------------------------------------| ...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, buildah, kubernetes-csi-node-driver-registrar, memcached-exporter, amazon-cloudwatch-agent-operator, thanos, boring-registry, rancher, fscrypt, terraform-provider-pagerduty, terraform-provider-grafana, rancher-machine, gogatekeeper,...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, buildah, kubernetes-csi-node-driver-registrar, memcached-exporter, amazon-cloudwatch-agent-operator, thanos, boring-registry, rancher, fscrypt, terraform-provider-pagerduty, terraform-provider-grafana, rancher-machine, gogatekeeper,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: buildah, memcached-exporter, amazon-cloudwatch-agent-operator, nats-top, gogatekeeper, restic, secrets-store-csi-driver-provider-azure, prometheus-pushgateway, aws-eks-pod-identity-agent, sftpgo-plugin-kms, smokescreen, ksops, trillian, nginx-prometheus-exporter,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: buildah, memcached-exporter, amazon-cloudwatch-agent-operator, nats-top, gogatekeeper, restic, secrets-store-csi-driver-provider-azure, prometheus-pushgateway, aws-eks-pod-identity-agent, sftpgo-plugin-kms, smokescreen, ksops, trillian, nginx-prometheus-exporter,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: buildah, memcached-exporter, amazon-cloudwatch-agent-operator, nats-top, gogatekeeper, restic, secrets-store-csi-driver-provider-azure, prometheus-pushgateway, aws-eks-pod-identity-agent, sftpgo-plugin-kms, smokescreen, ksops, trillian, nginx-prometheus-exporter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, crossplane-provider-aws-cognitoidentity, jobset-fips, authentik, kubernetes-dashboard-api-fips, google-guest-agent, envoy-gateway-fips, crossplane-provider-sql-fips, kyverno-policy-reporter-kyverno-plugin-fips,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, crossplane-provider-aws-cognitoidentity, jobset-fips, authentik, q, kubernetes-dashboard-api-fips, google-guest-agent, envoy-gateway-fips, mongo-tools, crossplane-provider-sql-fips, aws-application-networking-k8s,...

CVE-2026-23651

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-26122

Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2026-26124

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

EUVD-2026-9886

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-23651

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-23651

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

PT-2026-23570

Name of the Vulnerable Software and Affected Versions Azure Compute Gallery affected versions not specified Description A permissive regular expression within Azure Compute Gallery can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no informati...

Microsoft Azure Compute Gallery 安全漏洞

Microsoft Azure Compute Gallery is a service provided by Microsoft in the United States that manages virtual machines. There is a security vulnerability in Azure Compute Gallery, which stems from overly lax regular expressions, potentially allowing authorized attackers to gain local privileges...

Cleaner Compute: Akamai Adds 128 MW of Renewable Energy to the Grid

...

USN-8029-3 linux-azure vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

USN-8029-3: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...