Skip to contentMicrosoft Azure vulnerabilities
- microsoft azure ai searchAzure AI Search Information Disclosure VulnerabilityCVE-2024-290637.3 High
- microsoft azure compute galleryAzure Compute Gallery Elevation of Privilege VulnerabilityCVE-2024-214246.5 Medium
- azure azure-c-shared-utility, microsoft azure c shared utility +1 moreAzure C SDK Integer Wraparound VulnerabilityCVE-2024-29195Fix available6.0 Medium
- microsoft azure kubernetes service, confcom +1 moreMicrosoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityCVE-2024-214009.0 Critical
- microsoft open management infrastructure, azure automation, azure automation update management +9 more +11 moreOpen Management Infrastructure (OMI) Elevation of Privilege VulnerabilityCVE-2024-213307.8 High
- microsoft azure data studioAzure Data Studio Elevation of Privilege VulnerabilityCVE-2024-262037.3 High
- microsoft azure sdk, azure software development kit +1 moreAzure SDK Spoofing VulnerabilityCVE-2024-214217.5 High
- azure azure-uamqp-c, microsoft azure uamqp +1 moreAzure IoT Platform Device SDK Double Free VulnerabilityCVE-2024-27099Fix available9.8 Critical
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Confidential Container Elevation of Privilege VulnerabilityCVE-2024-214039.0 Critical
- microsoft azure file syncMicrosoft Azure File Sync Elevation of Privilege VulnerabilityCVE-2024-213975.3 Medium
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Confidential Container Remote Code Execution VulnerabilityCVE-2024-213769.0 Critical
- microsoft azure site recoveryMicrosoft Azure Site Recovery Elevation of Privilege VulnerabilityCVE-2024-213649.3 Critical
- microsoft azure stack hubAzure Stack Hub Spoofing VulnerabilityCVE-2024-206796.5 Medium
- microsoft azure active directory, entra +1 moreMicrosoft Azure Active Directory B2C Spoofing VulnerabilityCVE-2024-213816.8 Medium
- microsoft azure connected machine agentAzure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2024-213297.3 High
- microsoft azure devops server, azure devops server 2020.1.2, azure devops server 2022 +2 moreAzure DevOps Server Remote Code Execution VulnerabilityCVE-2024-206677.5 High
- azure azure-uamqp-c, microsoft azure uamqp +1 moreAzure IoT Platform Device SDK Remote Code Execution VulnerabilityCVE-2024-25110Fix available9.8 Critical
- azure ipam, microsoft azure ipam +1 moreAzure IPAM solution Elevation of Privilege VulnerabilityCVE-2024-216389.1 Critical
- microsoft azure storage moverAzure Storage Mover Remote Code Execution VulnerabilityCVE-2024-206768.0 High
- microsoft azure uamqp, azure azure-uamqp-c +1 moreAzure IoT Platform Device SDK Remote Code Execution VulnerabilityCVE-2024-21646Fix available9.8 Critical
- microsoft azure devops server, azure devops server 2020.1.2, azure devops server 2022 +2 moreAzure DevOps Server Spoofing VulnerabilityCVE-2023-217516.5 Medium
- microsoft azure connected machine agentAzure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2023-356247.3 High
- microsoft power platform, azure logic apps +1 moreMicrosoft Power Platform Connector Spoofing VulnerabilityCVE-2023-36019EPSS 15.8%9.6 Critical
- microsoft azure machine learning, azure machine learning software development kit +1 moreAzure Machine Learning Compute Instance for SDK Users Information Disclosure VulnerabilityCVE-2023-35625Fix available4.7 Medium
- azure-rtos threadx, microsoft azure rtos threadx +1 moreAzure RTOS ThreadX Remote Code Execution VulnerabilityCVE-2023-486938.7 High
- microsoft azure rtos netx duo, azure-rtos netxduo +1 moreAzure RTOS NetX Duo Remote Code Execution VulnerabilityCVE-2023-486929.1 Critical
- microsoft azure rtos netx duo, azure-rtos netxduo +1 moreAzure RTOS NetX Duo Remote Code Execution VulnerabilityCVE-2023-486918.1 High
- microsoft azure rtos netx duo, azure-rtos netxduo +1 moreAzure RTOS NetX Duo Remote Code Execution VulnerabilityCVE-2023-483169.8 Critical
- microsoft azure rtos netx duo, azure-rtos netxduo +1 moreAzure RTOS NetX Duo Remote Code Execution VulnerabilityCVE-2023-483158.8 High
- microsoft azure pipelines agentAzure DevOps Server Remote Code Execution VulnerabilityCVE-2023-364378.8 High
- microsoft azure app service, azure function app, azure logic app +1 more +3 moreAzure CLI REST Command Information Disclosure VulnerabilityCVE-2023-36052Fix availableEPSS 21.1%8.6 High
- microsoft azure identity sdk, azure identity sdk for .net, azure identity sdk for java +2 more +4 moreAzure Identity SDK Remote Code Execution VulnerabilityCVE-2023-364158.8 High
- microsoft azure identity sdk, azure identity sdk for .net +1 moreAzure Identity SDK Remote Code Execution VulnerabilityCVE-2023-36414Fix available8.8 High
- microsoft azure rtos guix studioAzure RTOS GUIX Studio Remote Code Execution VulnerabilityCVE-2023-364187.8 High
- microsoft azure hdinsightAzure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege VulnerabilityCVE-2023-364198.8 High
- microsoft azure devops server, azure devops server 2020.0.2, azure devops server 2020.1.2 +1 more +3 moreAzure DevOps Server Elevation of Privilege VulnerabilityCVE-2023-365617.3 High
- microsoft sql server, odbc driver 17 for sql server on linux, odbc driver 17 for sql server on macos +18 more +20 moreMicrosoft SQL Server Denial of Service VulnerabilityCVE-2023-367285.5 Medium
- microsoft azure network watcher, azure network watcher vm extension +1 moreAzure Network Watcher VM Agent Elevation of Privilege VulnerabilityCVE-2023-367377.8 High
- microsoft azure devops server, azure devops server 2019.0.1, azure devops server 2020.0.2 +2 more +4 moreAzure DevOps Server Remote Code Execution VulnerabilityCVE-2023-381557.0 High
- microsoft azure devops server, azure devops server 2019.0.1, azure devops server 2020.0.2 +2 more +4 moreAzure DevOps Server Remote Code Execution VulnerabilityCVE-2023-331368.8 High
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCVE-2023-293327.5 High
- microsoft azure hdinsightAzure HDInsight Apache Ambari JDBC Injection Elevation of Privilege VulnerabilityCVE-2023-381567.2 High
- microsoft azure arc-enabled serversAzure Arc-Enabled Servers Elevation of Privilege VulnerabilityCVE-2023-381767.0 High
- microsoft azure hdinsightAzure Apache Ambari Spoofing VulnerabilityCVE-2023-368814.5 Medium
- microsoft azure hdinsightAzure Apache Oozie Spoofing VulnerabilityCVE-2023-368774.5 Medium
- microsoft azure hdinsightAzure Apache Hadoop Spoofing VulnerabilityCVE-2023-381884.5 Medium
- microsoft azure hdinsightAzure HDInsight Jupyter Notebook Spoofing VulnerabilityCVE-2023-353944.6 Medium
- microsoft azure hdinsightAzure Apache Hive Spoofing VulnerabilityCVE-2023-353934.5 Medium
- microsoft azure devops server, azure devops server 2019.0.1, azure devops server 2020.1.2 +1 more +3 moreAzure DevOps Server Spoofing VulnerabilityCVE-2023-368696.3 Medium
- microsoft azure service fabric, azure service fabric 9.0 for windows, azure service fabric 9.1 for windows +2 moreAzure Service Fabric on Windows Information Disclosure VulnerabilityCVE-2023-368686.5 Medium
- Show moreLoading…