USN-8030-1: Linux kernel (GCP) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

USN-8029-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...

CVE-2026-21522

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-23655

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user, potentially grant themselves elevated privileges and thus execute arbitrary code or gain access to sensitive data. Of the vulnerabilities labeled...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in in Azure Compute Gallery, which writes MAA tokens in the debug log. Remediation Upgrade github.com/Microsoft/confidential-sidecar-containers/pkg/common to version 2.12 or higher. References ...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in in Azure Compute Gallery, which writes MAA tokens in the debug log. Remediation Upgrade github.com/Microsoft/confidential-sidecar-containers/pkg/skr to version 2.12 or higher. References -...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in in Azure Compute Gallery, which writes MAA tokens in the debug log. Remediation Upgrade github.com/Microsoft/confidential-sidecar-containers/cmd/azmount/filemanager to version 2.12 or higher...

CVE-2026-23655

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2026-23655

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2026-21522

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-21522

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-21522

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-23655

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, buf, k9s, kyverno-policy-reporter-ui, nuclei, mcp-grafana, crossplane-provider-aws-sqs, yunikorn-k8shim, k6, octo-sts, crossplane-provider-azure-storage, restic, nsc, tfsec, percona-server-mongodb-operator, configmap-reload,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: nginx-prometheus-exporter, buf, k9s, kyverno-policy-reporter-ui, nuclei, kratos, mcp-grafana, blobfuse2, crossplane-provider-aws-sqs, mkcert, yunikorn-k8shim, k6, octo-sts, crossplane-provider-azure-storage, restic, nsc, tfsec, minify, percona-server-mongodb-operator...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, gitsign, goose, langfuse-fips, opa-fips, flux-helm-controller, otel-cli, cluster-api, smarter-device-manager, gpu-operator-fips, k8ssandra-operator, snyk-cli, kafka-proxy, sqlexporter, gobump,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: metrics-server-fips, aws-flb-kinesis, aws-fsx-csi-driver-fips, cephcsi, gitsign, goose, langfuse-fips, opa-fips, flux-helm-controller, otel-cli, cluster-api, smarter-device-manager, gpu-operator-fips, k8ssandra-operator, snyk-cli, kafka-proxy, sqlexporter, gobump,...