WID-SEC-W-2026-2017

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Azure (AI Bot Service, Active Directory und Synapse): Mehrere Schwachstellen

view advisory published 2026-06-21

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure AI Bot Service, Azure Active Directory und Azure Synapse ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-48584US	high8.8	0.91% (60th)	—	2026-06-19
Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.
CVE-2026-45480US	—	0.90% (60th)	—	2026-06-19
Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-47633US	—	1.03% (63rd)	—	2026-06-18
Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network.
CVE-2026-32174US	high8.8	0.77% (55th)	—	2026-06-18
Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.

references

External citations — patches, advisories, analysis.

Microsoft Leitfaden für Sicherheitsupdates vom 2026-06-18external
Microsoft CVE-2026-32174external
Microsoft CVE-2026-45480external
Microsoft CVE-2026-47633external
Microsoft CVE-2026-48584external
WID-SEC-W-2026-2017 - CSAF Versionself
WID-SEC-2026-2017 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan