NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Microsoft Azure
Advisory ansehen veröffentlicht 2026-08-12
Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.
01
beschreibt (17)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-70340US | high8.8OT erhöht | — | ||
Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-65806US | —OT erhöht | — | ||
Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-65673US | — | — | ||
Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-63522US | — | — | ||
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-62869US | —OT erhöht | — | ||
Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-57104US | critical9.6 | — | ||
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-50516US | —OT erhöht | — | ||
Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-47299US | — | — | ||
Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-68823US | — | — | ||
Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-65668US | — | — | ||
Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62873US | — | — | ||
Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-62830US | —OT erhöht | — | ||
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-59115US | — | — | ||
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-56162US | — | — | ||
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-56161US | — | — | ||
Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. | ||||
| CVE-2026-50481US | — | — | ||
Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-49163US | — | — | ||
Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network. | ||||
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan