CVE-2026-32211

CVE-2026-32211 describes a missing-authentication vulnerability in Azure MCP Server that allows an unauthorized network attacker to disclose information. The NVD entries corroborate a critical impact (CVSS v3.1: 9.1) with high confidentiality and integrity impact, and network attack vector with n...

CVE-2026-65816

Azure Arc (Microsoft) is affected by an elevation of privilege vulnerability caused by the use of an incorrectly-resolved name or reference. An unauthorized, unauthenticated attacker can exploit this over the network to gain elevated privileges, with high impact on confidentiality, integrity, and...

CVE-2024-38194

CVE-2024-38194 represents an Elevation of Privilege vulnerability in Azure Web Apps caused by improper authorization. The CVE is cited as enabling an authenticated attacker to elevate privileges over a network. Connected sources corroborate Azure Web Apps as the affected product and indicate Micr...