CVE-2024-49060

CVE-2024-49060 is an Azure Stack HCI Elevation of Privilege vulnerability with high impact (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; base score 8.8). Affected product: Azure Stack HCI 23H2. The root issue concerns trust management in the Stack HCI stack that can enable privilege escalation...

CVE-2024-38179

CVE-2024-38179 affects Microsoft Azure Stack HCI. It is an Elevation of Privilege vulnerability in Azure Stack HCI where the attacker would need local access (attack vector LOCAL) and low privileges (PR:L) with low complexity (AC:L) to achieve a change of control (S:C) resulting in high confident...

CVE-2026-26147

Azure Stack HCI Information Disclosure Vulnerability (CVE-2026-26147) can arise from improper input validation in Azure Compute Gallery, enabling a network-based disclosure by an authorized attacker. Impact: information disclosure; confidentiality impact HIGH, attack vector NETWORK, privileges re...

CVE-2026-69519

Azure Stack HCI has an observable response discrepancy vulnerability allowing an unauthenticated remote attacker to disclose sensitive information over the network. CVSS 3.1 scores it HIGH (8.6) with network attack vector and no privileges required. No patch version or exploitation details are pr...