Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Azure Billing can be exploited remotely to gain privileges.
2. An information disclosure vulnerability in Azure Machine Learning can be exploited remotely to obtain sensitive information.
3. An elevation of privilege vulnerability in Azure Arc can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Microsoft Container Registry can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Azure Logic Apps can be exploited remotely to gain privileges.
6. A spoofing vulnerability in Azure Portal can be exploited remotely to spoof user interface.
7. An elevation of privilege vulnerability in Azure Database for PostgreSQL can be exploited remotely to gain privileges.
8. An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in Azure Cosmos DB can be exploited remotely to gain privileges.

Original advisories

• CVE-2026-62874

• CVE-2026-68791
• CVE-2026-69399
• CVE-2026-69865
• CVE-2026-70009
• CVE-2026-70200
• CVE-2026-83944
• CVE-2026-83946
• CVE-2026-85878
• CVE-2026-85889
• CVE-2026-85917
• CVE-2026-87701

Exploitation

Related products

• Microsoft-Azure

CVE list

• CVE-2026-68791
  unknown
• CVE-2026-69399
  unknown
• CVE-2026-69865
  unknown
• CVE-2026-70009
  unknown
• CVE-2026-70200
  unknown
• CVE-2026-83944
  unknown
• CVE-2026-85889
  unknown
• CVE-2026-85917
  unknown
• CVE-2026-87701
  unknown
• CVE-2026-62874
  unknown
• CVE-2026-83946
  unknown
• CVE-2026-85878
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com