Multiple vulnerabilities in Microsoft Azure

Описание

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Azure Arc SQL Server Extension can be exploited remotely to gain privileges.
2. An information disclosure vulnerability in Microsoft Discovery Studio can be exploited remotely to obtain sensitive information.
3. An elevation of privilege vulnerability in Microsoft Entra ID can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Spring Cloud Azure can be exploited remotely to gain privileges.
5. A spoofing vulnerability in Azure Cosmos DB can be exploited remotely to spoof user interface.
6. An elevation of privilege vulnerability in Azure AI Language can be exploited remotely to gain privileges.
7. An information disclosure vulnerability in Azure CycleCloud can be exploited remotely to obtain sensitive information.
8. An elevation of privilege vulnerability in Azure HDInsight Ambari can be exploited remotely to gain privileges.
9. An elevation of privilege vulnerability in Microsoft Azure Active Directory B2C can be exploited remotely to gain privileges.
10. An elevation of privilege vulnerability in Entra ID can be exploited remotely to gain privileges.
11. A remote code execution vulnerability in Microsoft Azure CLI can be exploited remotely to execute arbitrary code.
12. A spoofing vulnerability in Microsoft Authentication Library (MSAL) for Node.js can be exploited remotely to spoof user interface.

Первичный источник обнаружения

• CVE-2026-62895
  CVE-2026-62906
  CVE-2026-62916
  CVE-2026-69854
  CVE-2026-69857
  CVE-2026-70352
  CVE-2026-77909
  CVE-2026-81349
  CVE-2026-83711
  CVE-2026-83941
  CVE-2026-83948
  CVE-2026-84003
  

Эксплуатация

Связанные продукты

• Microsoft-SQL-Server
• Microsoft-Active-Directory
• Microsoft-Azure
• Microsoft-Entra-ID

Список CVE

• CVE-2026-62906
  unknown
• CVE-2026-62916
  unknown
• CVE-2026-69857
  critical
• CVE-2026-70352
  unknown
• CVE-2026-83711
  unknown
• CVE-2026-83941
  critical
• CVE-2026-62895
  critical
• CVE-2026-69854
  critical
• CVE-2026-77909
  high
• CVE-2026-81349
  high
• CVE-2026-83948
  critical
• CVE-2026-84003
  high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com