Skip to content
OpenAdvisories
High WID-SEC-2026-2689 9 CVEs

Microsoft Azure: Mehrere Schwachstellen

Published Aug 6, 2026 · Updated Aug 6, 2026 · de-DE

Vendor: Microsoft Product: Azure Product: Entra Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure und Microsoft Entra ausnutzen, um beliebigen Code auszuführen oder erweiterte Berechtigungen zu erlangen.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.
Microsoft Entra ID (früher Azure Active Directory) ist ein cloudbasierter Identitäts- und Zugriffsverwaltungsdienst von Microsoft.

Vulnerabilities 9

  • Critical 10.0
    CVE-2026-56162

    Azure SQL Database Elevation of Privilege Vulnerability

    Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Azure SQL Database
  • Critical 9.9
    CVE-2026-50481

    Azure Active Directory Elevation of Privilege Vulnerability

    Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure Active Directory
  • Critical 9.9
    CVE-2026-59115

    Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

    '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Entra Provisioning Service
  • Critical 9.9
    CVE-2026-62830

    Azure SRE Agent Elevation of Privilege Vulnerability

    Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

    Microsoft Azure SRE Agent
  • Critical 9.8
    CVE-2026-62873

    Microsoft 365 Admin Center Elevation of Privilege Vulnerability

    Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft 365 Admin Center
  • Critical 9.6
    CVE-2026-56161

    Azure Logic Apps Information Disclosure Vulnerability

    Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.

    Microsoft Azure Logic Apps
  • Critical 9.1
    CVE-2026-68823

    Azure Confidential Ledger Remote Code Execution Vulnerability

    Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

    Microsoft Azure Confidential Ledger
  • High 8.8
    CVE-2026-49163

    Application Insights Profiler Elevation of Privilege Vulnerability

    Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.

    Microsoft Application Insights Profiler
  • High 8.8
    CVE-2026-65668

    Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

    Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Purview eDiscovery

Revision history

  1. #1

    Initiale Fassung

References