Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Azure Data Factory can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Azure Managed Instance for Apache Cassandra can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Azure Arc can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Azure SQL Database can be exploited remotely to gain privileges.
5. An information disclosure vulnerability in Azure Data Factory can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Azure Logic Apps can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Azure Data Manager for Energy can be exploited remotely to execute arbitrary code.
8. An information disclosure vulnerability in Azure Stack HCI can be exploited remotely to obtain sensitive information.
9. An elevation of privilege vulnerability in Azure Virtual Machines can be exploited remotely to gain privileges.
10. An information disclosure vulnerability in Microsoft Partner Center can be exploited remotely to obtain sensitive information.
11. A remote code execution vulnerability in Microsoft Entra ID can be exploited remotely to execute arbitrary code.
12. An elevation of privilege vulnerability in Microsoft Entra ID can be exploited remotely to gain privileges.
13. An information disclosure vulnerability in Microsoft Copilot in Azure can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2026-62834

• CVE-2026-65770
• CVE-2026-65816
• CVE-2026-66309
• CVE-2026-66800
• CVE-2026-68782
• CVE-2026-68789
• CVE-2026-69400
• CVE-2026-69419
• CVE-2026-69502
• CVE-2026-69519
• CVE-2026-69543
• CVE-2026-69555
• CVE-2026-69558
• CVE-2026-69836
• CVE-2026-69851
• CVE-2026-69855

Exploitation

Public exploits exist for this vulnerability.

Related products

• Microsoft-Azure
• Microsoft-Entra-ID
• Azure-Stack-HCI

CVE list

• CVE-2026-62834
  unknown
• CVE-2026-65770
  unknown
• CVE-2026-65816
  unknown
• CVE-2026-66309
  unknown
• CVE-2026-66800
  unknown
• CVE-2026-68782
  unknown
• CVE-2026-68789
  unknown
• CVE-2026-69400
  unknown
• CVE-2026-69419
  critical
• CVE-2026-69519
  unknown
• CVE-2026-69543
  critical
• CVE-2026-69555
  unknown
• CVE-2026-69558
  unknown
• CVE-2026-69836
  unknown
• CVE-2026-69851
  unknown
• CVE-2026-69855
  high
• CVE-2026-69502
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com