Skip to contentMicrosoft Azure vulnerabilities
- microsoft azure monitor agent metrics extension, azure monitor agent +1 moreAzure Monitor Agent Metrics Extension Elevation of Privilege VulnerabilityCVE-2026-428306.5 Medium
- microsoft azure logic appsAzure Logic Apps Elevation of Privilege VulnerabilityCVE-2026-428239.9 Critical
- microsoft azure connected machine agentAzure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2026-403817.8 High
- microsoft windows admin center in azure portal, windows admin center +1 moreWindows Admin Center in Azure Portal Elevation of Privilege VulnerabilityCVE-2026-410868.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +12 more +14 moreSQL Server Remote Code Execution VulnerabilityCVE-2026-403708.8 High
- microsoft azure machine learningAzure Machine Learning Notebook Spoofing VulnerabilityCVE-2026-338338.2 High
- microsoft azure sdk for javaAzure SDK for Java Security Feature Bypass VulnerabilityCVE-2026-33117Fix available9.1 Critical
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege VulnerabilityCVE-2026-322047.8 High
- microsoft azure devopsAzure DevOps Information Disclosure VulnerabilityCVE-2026-42826Public exploit10.0 Critical
- microsoft azure cloud shellAzure Cloud Shell Spoofing VulnerabilityCVE-2026-354289.6 Critical
- microsoft azure ai foundryAzure AI Foundry Elevation of Privilege VulnerabilityCVE-2026-354358.6 High
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityCVE-2026-338449.0 Critical
- microsoft azure machine learningAzure Machine Learning Notebook Spoofing VulnerabilityCVE-2026-322078.8 High
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution VulnerabilityCVE-2026-331099.9 Critical
- microsoft azure monitor action group notification systemAzure Monitor Action Group Notification System Elevation of Privilege VulnerabilityCVE-2026-411058.1 High
- microsoft azure iot centralAzure IoT Central Elevation of Privilege VulnerabilityCVE-2026-215159.9 Critical
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +15 more +17 moreSQL Server Elevation of Privilege VulnerabilityCVE-2026-321766.7 Medium
- microsoft azure logic appsAzure Logic Apps Elevation of Privilege VulnerabilityCVE-2026-321718.8 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege VulnerabilityCVE-2026-321927.8 High
- microsoft azure monitor, azure monitor agent +1 moreAzure Monitor Agent Elevation of Privilege VulnerabilityCVE-2026-321687.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +12 more +14 moreSQL Server Elevation of Privilege VulnerabilityCVE-2026-321676.7 Medium
- microsoft azure web appsAzure MCP Server Information Disclosure VulnerabilityCVE-2026-322119.1 Critical
- microsoft azure sre agent, azure sre agent gateway - signalr hub +1 moreAzure SRE Agent Information Disclosure VulnerabilityCVE-2026-321738.6 High
- microsoft azure kubernetes serviceMicrosoft Azure Kubernetes Service Elevation of Privilege VulnerabilityCVE-2026-3310510.0 Critical
- microsoft azure custom locations resource providerAzure Custom Locations Resource Provider (RP) Elevation of Privilege VulnerabilityCVE-2026-261359.6 Critical
- microsoft azure databricksAzure Databricks Elevation of Privilege VulnerabilityCVE-2026-3310710.0 Critical
- microsoft azure ai foundryAzure AI Foundry Elevation of Privilege VulnerabilityCVE-2026-3221310.0 Critical
- microsoft azure data factoryAzure Data Factory Information Disclosure VulnerabilityCVE-2026-236598.6 High
- microsoft azure devops: msazure, azure devops +1 moreAzure DevOps: msazure Elevation of Privilege VulnerabilityCVE-2026-236588.6 High
- microsoft azure cloud shellAzure Cloud Shell Elevation of Privilege VulnerabilityCVE-2026-3216910.0 Critical
- microsoft azure automation hybrid worker windows extensionHybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege VulnerabilityCVE-2026-261417.8 High
- microsoft azure mcp server, azure mcp server tools 1.0.0 (npm), azure mcp server tools 1.0.0 (nuget) +3 more +5 moreAzure MCP Server Tools Elevation of Privilege VulnerabilityCVE-2026-26118Public exploitFix available8.8 High
- microsoft arc enabled servers - azure connected machine agent, arc enabled servers azure connected machine agent +1 moreArc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege VulnerabilityCVE-2026-261177.8 High
- microsoft azure linux virtual machines with azure diagnostics extension, linux diagnostic extension +1 moreLinux Azure Diagnostic extension (LAD) Elevation of Privilege VulnerabilityCVE-2026-236657.8 High
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure VulnerabilityCVE-2026-236627.5 High
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure VulnerabilityCVE-2026-236617.5 High
- microsoft azure ad ssh login extension for linuxMicrosoft Azure AD SSH Login extension for Linux Elevation of Privilege VulnerabilityCVE-2026-261488.1 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +12 more +14 moreSQL Server Elevation of Privilege VulnerabilityCVE-2026-261158.8 High
- microsoft azure iot explorerAzure IOT Explorer Spoofing VulnerabilityCVE-2026-261217.5 High
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure VulnerabilityCVE-2026-236647.5 High
- microsoft windows admin center in azure portal, windows admin center +1 moreWindows Admin Center in Azure Portal Elevation of Privilege VulnerabilityCVE-2026-236607.8 High
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +12 more +14 moreSQL Server Elevation of Privilege VulnerabilityCVE-2026-212628.8 High
- microsoft azure localAzure Local Remote Code Execution VulnerabilityCVE-2026-212288.1 High
- microsoft azure hdinsightAzure HDInsight Spoofing VulnerabilityCVE-2026-215295.7 Medium
- microsoft azure ai language authoring, azure conversation authoring client library +1 moreAzure SDK for Python Remote Code Execution VulnerabilityCVE-2026-21531Public exploitFix available9.8 Critical
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure VulnerabilityCVE-2026-215286.5 Medium
- microsoft azure devops server, azure devops server 2022 +1 moreAzure DevOps Server Cross-Site Scripting VulnerabilityCVE-2026-215126.5 Medium
- microsoft azure front doorAzure Front Door Elevation of Privilege VulnerabilityCVE-2026-243009.8 Critical
- microsoft azure functionsAzure Function Information Disclosure VulnerabilityCVE-2026-215328.2 High
- microsoft azure arcAzure Arc Elevation of Privilege VulnerabilityCVE-2026-243028.6 High
- Show moreLoading…