Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Azure MCP Server can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Microsoft Azure Kubernetes Service can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Azure Custom Locations Resource Provider (RP) can be exploited remotely to gain privileges.
5. An information disclosure vulnerability in Azure SRE Agent can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Azure Databricks can be exploited remotely to gain privileges.

Original advisories

• CVE-2026-32211

• CVE-2026-32213
• CVE-2026-33105
• CVE-2026-26135
• CVE-2026-32173
• CVE-2026-33107

Exploitation

Related products

• Microsoft-Azure

CVE list

• CVE-2026-26135
  critical
• CVE-2026-32173
  critical
• CVE-2026-32211
  critical
• CVE-2026-32213
  critical
• CVE-2026-33105
  critical
• CVE-2026-33107
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com