Skip to content
OpenAdvisories
High NCSC-2026-0287 17 CVEs

Kwetsbaarheden verholpen in Microsoft Azure

Published Aug 12, 2026 · Updated Aug 12, 2026 · nl

Vendor: Microsoft Product: 365 Admin Center Product: Application Insights Profiler Product: Azure Product: Azure Active Directory Product: Azure Confidential Ledger Product: Azure CycleCloud 8.9.1 Product: Azure CycleCloud 8.9.2 Product: Azure Kubernetes Service Product: Azure Logic Apps Product: Azure Monitor Agent Linux Extension Product: Azure SQL Database Product: Azure SRE Agent Product: Azure Storage Explorer Product: Entra Product: Entra Connect Product: Entra ID Product: Entra Provisioning Service Product: Purview eDiscovery Product: Windows Admin Center

Summary

Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade zoals benoemd in onderstaande tabel.

De kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.

De kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.

```
Azure Monitor Agent:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Purview eDiscovery:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Azure Kubernetes Service:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Azure Entra ID:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker |
|----------------|------|-------------------------------------|

Microsoft Entra Connect Sync:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Azure SQL Database:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten |
| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Azure Logic Apps:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Azure Active Directory:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Application Insights Profiler:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Azure SRE Agent:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Microsoft Entra Provisioning Service (SyncFabric):
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Azure CycleCloud:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten |
| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens |
|----------------|------|-------------------------------------|

Azure Confidential Ledger:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code |
|----------------|------|-------------------------------------|

Microsoft 365 Admin Center:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

Azure Storage Explorer:
|----------------|------|-------------------------------------|
| CVE-ID | CVSS | Impact |
|----------------|------|-------------------------------------|
| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten |
|----------------|------|-------------------------------------|

```

Oplossingen
Microsoft heeft updates beschikbaar gesteld waarmee de beschreven kwetsbaarheden worden verholpen. We raden u aan om deze updates te installeren. Meer informatie over de kwetsbaarheden, de installatie van de updates en eventuele work-arounds vindt u op:

https://portal.msrc.microsoft.com/en-us/security-guidance

Vulnerabilities 17

  • Critical 10.0
    CVE-2026-56162

    Azure SQL Database Elevation of Privilege Vulnerability

    Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure SQL Database
  • Critical 9.9
    CVE-2026-50481

    Azure Active Directory Elevation of Privilege Vulnerability

    Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure Active Directory
  • Critical 9.9
    CVE-2026-59115

    Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

    '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra Provisioning Service
  • Critical 9.9
    CVE-2026-62830

    Azure SRE Agent Elevation of Privilege Vulnerability

    Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure SRE Agent
  • Critical 9.8
    CVE-2026-62873

    Microsoft 365 Admin Center Elevation of Privilege Vulnerability

    Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft 365 Admin Center
  • Critical 9.6
    CVE-2026-56161

    Azure Logic Apps Information Disclosure Vulnerability

    Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

    Microsoft Azure Logic Apps
  • Critical 9.4
    CVE-2026-50516

    Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

    Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure Kubernetes Service
  • Critical 9.1
    CVE-2026-68823

    Azure Confidential Ledger Remote Code Execution Vulnerability

    Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

    Microsoft Azure Confidential Ledger
  • High 8.8
    CVE-2026-49163

    Application Insights Profiler Elevation of Privilege Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.

    Microsoft Application Insights Profiler
  • High 8.8
    CVE-2026-57104

    Azure Storage Explorer Elevation of Privilege Vulnerability

    Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure Storage Explorer
  • High 8.8
    CVE-2026-62869

    Azure Entra ID Spoofing Vulnerability

    Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.

    Microsoft Microsoft Entra
  • High 8.8
    CVE-2026-65668

    Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

    Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Purview eDiscovery
  • High 8.1
    CVE-2026-70340

    Azure CycleCloud Elevation of Privilege Vulnerability

    Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure CycleCloud 8.9.1
  • High 7.8
    CVE-2026-63522

    Azure SQL Database Elevation of Privilege Vulnerability

    Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

    Microsoft Azure SQL Database
  • High 7.8
    CVE-2026-65673

    Microsoft Entra Connect Elevation of Privilege Vulnerability

    Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra Connect
  • High 7.2
    CVE-2026-47299

    Azure Monitor Agent Elevation of Privilege Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure Monitor Agent Linux Extension Linux
  • Medium 6.5
    CVE-2026-65806

    Azure CycleCloud Information Disclosure Vulnerability

    Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

    Microsoft Azure CycleCloud 8.9.2

Revision history

  1. #1.0.0

    Initiele versie