Export limit exceeded: 413110 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 413110 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (522 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-50516 | 1 Microsoft | 1 Azure Kubernetes Service | 2026-10-21 | 9.4 Critical |
| Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-69877 | 1 Microsoft | 3 Azure Cli, Azure Command-line Interface, Azure Devops Cli Extension | 2026-10-18 | 6.5 Medium |
| Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-85922 | 1 Microsoft | 13 Azure-keyvault-administration, Azure-keyvault-certificates, Azure-keyvault-keys and 10 more | 2026-10-16 | 7.4 High |
| Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-85925 | 1 Microsoft | 8 Azure-keyvault-administration, Azure-keyvault-certificates, Azure-keyvault-keys and 5 more | 2026-10-16 | 8.2 High |
| Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-88094 | 1 Microsoft | 1 Azure-storage-blob-batch | 2026-10-16 | 8.1 High |
| Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-88132 | 1 Microsoft | 4 Azure Keyvault Administration, Azure Keyvault Certificates, Azure Keyvault Keys and 1 more | 2026-10-16 | 5.9 Medium |
| Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-69435 | 1 Microsoft | 1 Azure Sre Agent | 2026-10-15 | 9.6 Critical |
| Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-83947 | 1 Microsoft | 2 Azure Event Grid, Azure Event Grid System | 2026-10-15 | 7.7 High |
| Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-83711 | 1 Microsoft | 2 Azure Active Directory B2c, Entra Id | 2026-10-14 | 10 Critical |
| Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-70352 | 1 Microsoft | 1 Azure Ai Language Authoring | 2026-10-14 | 10 Critical |
| Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-100207 | 1 Microsoft | 1 Azure Cyclecloud | 2026-10-13 | 7.3 High |
| Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally. | ||||
| CVE-2026-85891 | 1 Microsoft | 1 Azure Hdinsights | 2026-10-13 | 7.5 High |
| Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-83943 | 1 Microsoft | 1 Azure Api Center | 2026-10-09 | 8.7 High |
| Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-77900 | 1 Microsoft | 1 Azure App Service | 2026-10-09 | 9.8 Critical |
| Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-69854 | 1 Microsoft | 3 Azure Spring Cloud, Spring Cloud, Spring Cloud Azure | 2026-09-29 | 9 Critical |
| Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-69865 | 1 Microsoft | 1 Azure Container Registry | 2026-09-29 | 10 Critical |
| Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-87701 | 1 Microsoft | 2 Azure Cosmos Db, Cosmos Db | 2026-09-29 | 9.6 Critical |
| Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-68791 | 1 Microsoft | 1 Azure Machine Learning | 2026-09-25 | 8.6 High |
| Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-69399 | 1 Microsoft | 1 Azure Arc | 2026-09-25 | 10 Critical |
| Azure Arc Elevation of Privilege Vulnerability | ||||
| CVE-2026-70200 | 1 Microsoft | 1 Azure Logic Apps | 2026-09-25 | 10 Critical |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network. | ||||