Multiple vulnerabilities in Microsoft Azure

Описание

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Azure Data Factory can be exploited remotely to gain privileges.
2. A remote code execution vulnerability in Azure Managed Instance for Apache Cassandra can be exploited remotely to execute arbitrary code.
3. An elevation of privilege vulnerability in Azure Arc can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Azure SQL Database can be exploited remotely to gain privileges.
5. An information disclosure vulnerability in Azure Data Factory can be exploited remotely to obtain sensitive information.
6. An elevation of privilege vulnerability in Azure Logic Apps can be exploited remotely to gain privileges.
7. A remote code execution vulnerability in Azure Data Manager for Energy can be exploited remotely to execute arbitrary code.
8. An information disclosure vulnerability in Azure Stack HCI can be exploited remotely to obtain sensitive information.
9. An elevation of privilege vulnerability in Azure Virtual Machines can be exploited remotely to gain privileges.
10. An information disclosure vulnerability in Microsoft Partner Center can be exploited remotely to obtain sensitive information.
11. A remote code execution vulnerability in Microsoft Entra ID can be exploited remotely to execute arbitrary code.
12. An elevation of privilege vulnerability in Microsoft Entra ID can be exploited remotely to gain privileges.
13. An information disclosure vulnerability in Microsoft Copilot in Azure can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2026-62834
  CVE-2026-65770
  CVE-2026-65816
  CVE-2026-66309
  CVE-2026-66800
  CVE-2026-68782
  CVE-2026-68789
  CVE-2026-69400
  CVE-2026-69419
  CVE-2026-69502
  CVE-2026-69519
  CVE-2026-69543
  CVE-2026-69555
  CVE-2026-69558
  CVE-2026-69836
  CVE-2026-69851
  CVE-2026-69855
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Microsoft-Azure
• Microsoft-Entra-ID
• Azure-Stack-HCI

Список CVE

• CVE-2026-62834
  unknown
• CVE-2026-65770
  unknown
• CVE-2026-65816
  unknown
• CVE-2026-66309
  unknown
• CVE-2026-66800
  unknown
• CVE-2026-68782
  unknown
• CVE-2026-68789
  unknown
• CVE-2026-69400
  unknown
• CVE-2026-69419
  critical
• CVE-2026-69519
  unknown
• CVE-2026-69543
  critical
• CVE-2026-69555
  unknown
• CVE-2026-69558
  unknown
• CVE-2026-69836
  unknown
• CVE-2026-69851
  unknown
• CVE-2026-69855
  high
• CVE-2026-69502
  critical

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com