Description
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Azure Billing can be exploited remotely to gain privileges.
- An information disclosure vulnerability in Azure Machine Learning can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Azure Arc can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Microsoft Container Registry can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Azure Logic Apps can be exploited remotely to gain privileges.
- A spoofing vulnerability in Azure Portal can be exploited remotely to spoof user interface.
- An elevation of privilege vulnerability in Azure Database for PostgreSQL can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Azure AI Foundry can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Azure Cosmos DB can be exploited remotely to gain privileges.
Original advisories
- CVE-2026-68791
- CVE-2026-69399
- CVE-2026-69865
- CVE-2026-70009
- CVE-2026-70200
- CVE-2026-83944
- CVE-2026-83946
- CVE-2026-85878
- CVE-2026-85889
- CVE-2026-85917
- CVE-2026-87701
Exploitation
Related products
CVE list
- CVE-2026-68791 critical
- CVE-2026-69399 critical
- CVE-2026-69865 critical
- CVE-2026-70009 critical
- CVE-2026-70200 critical
- CVE-2026-83944 critical
- CVE-2026-85889 critical
- CVE-2026-85917 critical
- CVE-2026-87701 critical
- CVE-2026-62874 unknown
- CVE-2026-83946 high
- CVE-2026-85878 critical
KB list
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!