Multiple vulnerabilities in Microsoft Azure

Beschreibung

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Discovery Studio can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Microsoft Entra ID can be exploited remotely to gain privileges.
3. A spoofing vulnerability in Azure Cosmos DB can be exploited remotely to spoof user interface.
4. An elevation of privilege vulnerability in Azure AI Language can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Microsoft Azure Active Directory B2C can be exploited remotely to gain privileges.
6. An elevation of privilege vulnerability in Entra ID can be exploited remotely to gain privileges.

Ursprüngliche Informationshinweise

• CVE-2026-62906

• CVE-2026-62916
• CVE-2026-69857
• CVE-2026-70352
• CVE-2026-83711
• CVE-2026-83941

Betroffene Produkte

• Microsoft-Active-Directory
• Microsoft-Azure
• Microsoft-Entra-ID

CVE Liste

• CVE-2026-62906
  unknown
• CVE-2026-62916
  unknown
• CVE-2026-69857
  unknown
• CVE-2026-70352
  unknown
• CVE-2026-83711
  unknown
• CVE-2026-83941
  unknown

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com