Description
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information.
Below is a complete list of vulnerabilities:
- A spoofing vulnerability in Microsoft Entra ID Entitlement Management can be exploited remotely to spoof user interface.
- An elevation of privilege vulnerability in Microsoft Partner Center can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Azure IoT Central can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Microsoft Purview eDiscovery can be exploited remotely to gain privileges.
Fiches de renseignement originales
Produits associés
Liste CVE
- CVE-2026-24303 critical
- CVE-2026-26150 critical
- CVE-2026-35431 critical
- CVE-2026-21515 critical
En savoir plus
Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com
Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !