Multiple vulnerabilities in Microsoft Azure

Beschreibung

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Azure Data Factory can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Azure Managed Instance for Apache Cassandra can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Azure Arc can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Azure SQL Database can be exploited remotely to gain privileges.
5. An information disclosure vulnerability in Azure Data Factory can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Azure Logic Apps can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Azure Data Manager for Energy can be exploited remotely to execute arbitrary code.
8. An information disclosure vulnerability in Azure Stack HCI can be exploited remotely to obtain sensitive information.
9. An elevation of privilege vulnerability in Azure Virtual Machines can be exploited remotely to gain privileges.
10. An information disclosure vulnerability in Microsoft Partner Center can be exploited remotely to obtain sensitive information.
11. A remote code execution vulnerability in Microsoft Entra ID can be exploited remotely to execute arbitrary code.
12. An elevation of privilege vulnerability in Microsoft Entra ID can be exploited remotely to gain privileges.
13. An information disclosure vulnerability in Microsoft Copilot in Azure can be exploited remotely to obtain sensitive information.

Ursprüngliche Informationshinweise

• CVE-2026-62834

• CVE-2026-65770
• CVE-2026-65816
• CVE-2026-66309
• CVE-2026-66800
• CVE-2026-68782
• CVE-2026-68789
• CVE-2026-69400
• CVE-2026-69419
• CVE-2026-69502
• CVE-2026-69519
• CVE-2026-69543
• CVE-2026-69555
• CVE-2026-69558
• CVE-2026-69836
• CVE-2026-69851
• CVE-2026-69855

Ausnutzung

Public exploits exist for this vulnerability.

Betroffene Produkte

• Microsoft-Azure
• Microsoft-Entra-ID
• Azure-Stack-HCI

CVE Liste

• CVE-2026-62834
  unknown
• CVE-2026-65770
  unknown
• CVE-2026-65816
  unknown
• CVE-2026-66309
  unknown
• CVE-2026-66800
  unknown
• CVE-2026-68782
  unknown
• CVE-2026-68789
  unknown
• CVE-2026-69400
  unknown
• CVE-2026-69419
  critical
• CVE-2026-69519
  unknown
• CVE-2026-69543
  critical
• CVE-2026-69555
  unknown
• CVE-2026-69558
  unknown
• CVE-2026-69836
  unknown
• CVE-2026-69851
  unknown
• CVE-2026-69855
  high
• CVE-2026-69502
  critical

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com