説明
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface.
Below is a complete list of vulnerabilities:
- An information disclosure vulnerability in Microsoft Discovery Studio can be exploited remotely to obtain sensitive information.
- An elevation of privilege vulnerability in Microsoft Entra ID can be exploited remotely to gain privileges.
- A spoofing vulnerability in Azure Cosmos DB can be exploited remotely to spoof user interface.
- An elevation of privilege vulnerability in Azure AI Language can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Microsoft Azure Active Directory B2C can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Entra ID can be exploited remotely to gain privileges.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2026-62906 unknown
- CVE-2026-62916 unknown
- CVE-2026-69857 critical
- CVE-2026-70352 unknown
- CVE-2026-83711 unknown
- CVE-2026-83941 critical
KBリスト
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！