Multiple vulnerabilities in Microsoft Azure

Descrição

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Azure MCP Server can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Microsoft Azure Kubernetes Service can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Azure Custom Locations Resource Provider (RP) can be exploited remotely to gain privileges.
5. An information disclosure vulnerability in Azure SRE Agent can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Azure Databricks can be exploited remotely to gain privileges.

Comunicados originais

• CVE-2026-32211

• CVE-2026-32213
• CVE-2026-33105
• CVE-2026-26135
• CVE-2026-32173
• CVE-2026-33107

Produtos relacionados

• Microsoft-Azure

Lista de CVE

• CVE-2026-26135
  critical
• CVE-2026-32173
  critical
• CVE-2026-32211
  critical
• CVE-2026-32213
  critical
• CVE-2026-33105
  critical
• CVE-2026-33107
  critical

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com