NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Microsoft Azure
Advisory ansehen veröffentlicht 2026-10-13
Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten, zoals Key Vault, DevOps, API center en Storage.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-96204US | medium6.5 | — | ||
Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-88132US | medium5.9 | — | ||
Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-88094US | high8.1 | — | ||
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over… | ||||
| CVE-2026-85925US | high8.2 | — | ||
Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-85922US | high7.4 | — | ||
Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. | ||||
| CVE-2026-69877US | medium6.5 | — | ||
Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-100207US | high7.3 | — | ||
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally. | ||||
| CVE-2026-96207US | critical10.0 | — | ||
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. | ||||
| CVE-2026-83947US | medium6.5OT erhöht | — | ||
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-83943US | high8.7 | — | ||
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-69435US | high8.1 | — | ||
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-96205US | — | — | ||
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan