CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

CVE-2026-58630

CVE-2026-58630 concerns Azure App Service on Azure Stack Hub. The issue is improper access control that allows an unauthenticated attacker to elevate privileges over a network. Impact is high for confidentiality and integrity; CVSS 3.1 base score 10.0. Connected sources confirm the name and core ...

CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2026-57106

CVE-2026-57106 describes a server-side request forgery (SSRF) in the Data Quality component that can allow an unauthenticated attacker to elevate privileges over a network. The confirmed CVSS 3.1 vector is AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H with a base score of 10.0 (CRITICAL), indicating networ...

CVE-2026-57106 Data Quality Elevation of Privilege Vulnerability

...

CVE-2026-58275

Technical details about CVE-2026-58275 are not publicly available in the provided documents. No confirmed affected product versions, root cause, impact, or patch information is disclosed here. Monitor for updates from official sources.

CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability

...

CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability

...

CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability

...

CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability

...

CVE-2026-62825

CVE-2026-62825 : Azure Key Vault suffers an elevation of privilege due to improper authentication. The entry is reported as a network-based, unauthenticated attack with a CVSS v3.1 base score of 10 (Critical), affecting integrity and availability (I=HIGH, A=HIGH) while confidentiality is None. Th...

CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

...

CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability

...

CVE-2026-56167

Technical details about CVE-2026-56167 are not publicly provided in the connected documents. Monitor for updates from Microsoft/MSRC and CVE databases for affected products, vulnerable components, versions, and remediation.

CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability

...

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network...

Azure DNS Elevation of Privilege Vulnerability

Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network...

GHSA-8PRM-248R-H957 Microsoft Security Advisory CVE-2026-47300 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core Negotiate Authentication Microsoft.AspNetCore.Authentication.Negotiate. This advisory also provides guidance on what developers can do to update their applications to remov...

Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core Negotiate Authentication Microsoft.AspNetCore.Authentication.Negotiate. This advisory also provides guidance on what developers can do to update their applications to remov...