Microsoft Azure

Name: Microsoft Azure
Brand: Microsoft

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical53high94medium1low

updated 2026-10-27

vulnerabilities (321)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-39682US	critical9.8OT critical	3.25% (88th)	KEV	no fix	2025-09-05	≤ Linux Kernel <6.6.96.2-1 on Linux 3.0
CVE-2026-21531US	—	2.58% (85th)	Exploit	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-26118US	—	1.00% (63rd)	Exploit	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-42826US	high7.5	0.84% (58th)	Exploit	no fix	2026-05-07	≤ vers:unknown/*
CVE-2026-50338US	—	0.52% (44th)	Exploit	no fix	2026-07-14	≤ vers:unknown/*
CVE-2025-40040US	medium5.5	0.38% (31st)	Exploit	no fix	2025-10-28	≤ Linux Kernel <6.6.104.2-4 on Linux 3.0
CVE-2025-38678US	medium5.5	0.28% (20th)	Exploit	no fix	2025-09-03	≤ Linux Kernel <6.6.96.2-1 on Linux 3.0
CVE-2024-29990US	critical9.0	18.0% (97th)	—	no fix	2024-04-09	≤ Compute Gallery
CVE-2024-20685US	—	5.53% (93rd)	—	no fix	2024-04-09	≤ Compute Gallery
CVE-2026-41103US	—	5.38% (93rd)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2019-0804US	medium6.5	5.19% (92nd)	—	no fix	2019-04-09	≤ multiple
CVE-2024-29195US	high8.1	5.01% (92nd)	—	2024-02-08	2024-03-26	< 2024-02-08
CVE-2026-50649US	—	4.02% (91st)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50646US	—	4.02% (91st)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-42899US	—	2.43% (84th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2024-29993US	—	1.99% (81st)	—	no fix	2024-04-09	≤ Compute Gallery
CVE-2024-21424US	—	1.90% (80th)	—	no fix	2024-04-09	≤ Compute Gallery
CVE-2026-50652US	—	1.73% (77th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-24302US	critical9.8	1.52% (74th)	—	no fix	2026-02-05	≤ vers:unknown/*
CVE-2026-24300US	—	1.25% (69th)	—	no fix	2026-02-05	≤ vers:unknown/*
CVE-2026-50524US	—	1.23% (69th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50651US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50648US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50527US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50525US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-47302US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-57108US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-56170US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50653US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-50506US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-45646US	—	1.17% (67th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-35435US	critical10.0	1.16% (67th)	—	no fix	2026-05-07	≤ vers:unknown/*
CVE-2026-26121US	—	1.09% (65th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-26122US	—OT elevated	1.06% (64th)	—	no fix	2026-03-05	2 versions
CVE-2025-47988US	—	1.04% (64th)	—	no fix	2025-07-08	≤ Monitor Agent <1.35.1
CVE-2026-23664US	—	1.04% (64th)	—	no fix	2026-03-10	≤ vers:unknown/*
CVE-2026-48567US	critical9.8	1.03% (64th)	—	no fix	2026-06-04	≤ vers:unknown/*
CVE-2026-21512US	—	1.03% (63rd)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-59115US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-49163US	—	1.02% (63rd)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-23655US	—OT elevated	1.02% (63rd)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-47299US	—	1.01% (63rd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-33844US	—	0.99% (62nd)	—	no fix	2026-05-07	≤ vers:unknown/*
CVE-2024-30053US	medium5.4	0.95% (61st)	—	no fix	2024-05-14	≤ Migrate <6.1.294.1008
CVE-2026-35428US	—	0.93% (61st)	—	no fix	2026-05-07	≤ vers:unknown/*
CVE-2026-68823US	—	0.93% (61st)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-40379US	high7.5	0.91% (60th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-56162US	—	0.90% (60th)	—	no fix	2026-08-07	≤ vers:unknown/*
CVE-2026-21532US	—	0.90% (59th)	—	no fix	2026-02-05	≤ vers:unknown/*
CVE-2025-26627US	—	0.90% (59th)	—	no fix	2025-03-11	5 versions

showing 50 of 321

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation49 CVEs
CWE-476NULL Pointer Dereference46 CVEs
CWE-416Use After Free20 CVEs
CWE-125Out-of-bounds Read18 CVEs
CWE-284Improper Access Control18 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')13 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor10 CVEs
CWE-770Allocation of Resources Without Limits or Throttling9 CVEs

sources (3)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)205 CVEs
NLNCSC-NL (CSAF)118 CVEs
EUEU Vulnerability Database (ENISA)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan