Kaspersky ID:
KLA91257
Data de detecção:
09/03/2026
Atualizado:
09/16/2026

Descrição

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Microsoft Discovery Studio can be exploited remotely to obtain sensitive information.
  2. An elevation of privilege vulnerability in Microsoft Entra ID can be exploited remotely to gain privileges.
  3. A spoofing vulnerability in Azure Cosmos DB can be exploited remotely to spoof user interface.
  4. An elevation of privilege vulnerability in Azure AI Language can be exploited remotely to gain privileges.
  5. An elevation of privilege vulnerability in Microsoft Azure Active Directory B2C can be exploited remotely to gain privileges.
  6. An elevation of privilege vulnerability in Entra ID can be exploited remotely to gain privileges.

Comunicados originais

Produtos relacionados

Lista de CVE

  • CVE-2026-62906
    unknown
  • CVE-2026-62916
    unknown
  • CVE-2026-69857
    critical
  • CVE-2026-70352
    unknown
  • CVE-2026-83711
    unknown
  • CVE-2026-83941
    critical

Lista de KB

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com

Encontrou uma imprecisão na descrição desta vulnerabilidade? Avise-nos!
Kaspersky Next:
cibersegurança redefinida
Saber mais
Novo Kaspersky!
Sua vida dgital merece proteção completa!
Saber mais
Do you want to save your changes?
Your message has been sent successfully.