CVE-2025-8486

creationtimestamp| type| source ---|---|--- 2025-10-16 04:20:48+00:00| seen| Telegram/BUoGx6NDDixNiQfqIx7EkMEExQqZfPip7pULfWR07ftDpo 2026-02-02 17:20:22+00:00| seen| Telegram/xt-FYBUgAB-JPn613veQ7TLaB3vDDuWlzNCaN8mxcH03YKg...

CVE-2025-59292

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

CVE-2025-59291

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

Malicious Package

Overview csv-parsing-xyz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-34360

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

EUVD-2025-34361

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user and potentially grant themselves elevated privileges, in order to gain access to sensitive data or execute arbitrary code with elevated privileges. The...

CVE-2025-59291

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

CVE-2025-59291 Confidential Azure Container Instances Elevation of Privilege Vulnerability

...

CVE-2025-59291 Confidential Azure Container Instances Elevation of Privilege Vulnerability

...

CVE-2025-59291

Summary: CVE-2025-59291 affects Confidential Azure Container Instances. The issue is described as external control of a file name or path, enabling an authorized attacker to elevate privileges locally. Affected product: Confidential Azure Container Instances (Azure). Root cause / vulnerability cl...

Azure Compute Gallery Elevation of Privilege Vulnerability

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

Confidential Azure Container Instances Elevation of Privilege Vulnerability

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...

Malicious Package

Overview @imou/web-front-basic-alg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview company-logo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview private-callouts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview company-overview is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview private-callout-queue is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview internal-greeter-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

PT-2025-42152

Name of the Vulnerable Software and Affected Versions Azure Container Instances ACI affected versions not specified Description An issue exists in Azure Container Instances where external control of file names or paths can allow an authorized attacker to elevate privileges locally. The...