Skip to content
OpenAdvisories
High WID-SEC-2026-2017 4 CVEs

Microsoft Azure (AI Bot Service, Active Directory und Synapse): Mehrere Schwachstellen

Published Jun 21, 2026 · Updated Jun 21, 2026 · de-DE

Vendor: Microsoft Product: Azure Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure AI Bot Service, Azure Active Directory und Azure Synapse ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.

Vulnerabilities 4

  • Critical 10.0
    CVE-2026-45480

    Azure Active Directory Elevation of Privilege Vulnerability

    Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure Active Directory
  • Critical 9.9
    CVE-2026-48584

    Microsoft Azure Synapse Elevation of Privilege Vulnerability

    Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure Synapse
  • High 7.7
    CVE-2026-32174

    Azure Bot Service Elevation of Privilege Vulnerability

    Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure AI Bot Service
  • High 7.5
    CVE-2026-47633

    Microsoft Cost Management Information Disclosure Vulnerability

    Exposure of sensitive information to an unauthorized actor in Cost Management Interactive Experiences allows an unauthorized attacker to disclose information over a network.

    Microsoft Microsoft Cost Management

Revision history

  1. #1

    Initiale Fassung

References