CVE-2026-62835

Azure Portal Information Disclosure vulnerability (CVE-2026-62835) stems from improper authorization, allowing an unauthenticated attacker to disclose information over a network. The available sources report CVSS v3.1 base score 9.3 (CRITICAL), with NETWORK attack vector, LOW complexity, NO privi...

CVE-2025-53792

CVE-2025-53792: Azure Portal Elevation of Privilege vulnerability with a CRITICAL CVSSv3.1 base score (9.1) and network attack vector. Public details from NVD/Microsoft indicate an improper access control issue in the Azure Portal that could allow an attacker to obtain elevated privileges, potent...

CVE-2026-83946

CVE-2026-83946 is a cross-site scripting (XSS) vulnerability in Azure Portal , caused by improper neutralization of input during web page generation. An unauthorized attacker with network access can exploit this to perform spoofing , achieving high confidentiality impact and low integrity impact ...