Summary
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Azure Komponenten ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Spoofing-Angriffe durchzuführen oder Informationen offenzulegen.
Product
Azure ist eine Cloud Computing-Plattform von Microsoft.
Vulnerabilities 4
-
Critical 9.8
Azure App Service Remote Code Execution Vulnerability
Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.
-
Critical 9.6
Azure SRE Agent Elevation of Privilege Vulnerability
Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.
-
High 8.7
Azure API Center Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.
-
High 7.7
Azure Event Grid Spoofing Vulnerability
Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Security Update Guide vom 2026-10-08
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83947
-
Microsoft Security Update Guide vom 2026-10-08
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83943
-
Microsoft Security Update Guide vom 2026-10-08
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77900
-
Microsoft Security Update Guide vom 2026-10-08
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69435