Microsoft Azure: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• Critical 10.0
  CVE-2026-96207

  Microsoft Partner Center Elevation of Privilege Vulnerability

  Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

  Microsoft Microsoft Partner Center
  Oct 8, 2026
• High 8.1
  CVE-2026-88094

  Azure Storage Library Elevation of Privilege Vulnerability

  Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft Edge (Chromium-based) azure-storage-blob-batch Browsers
  Oct 13, 2026
• High 7.5
  CVE-2026-85891

  Azure HDInsight Information Disclosure Vulnerability

  Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.

  Microsoft Azure HDInsight
  Oct 13, 2026
• High 7.3
  CVE-2026-100207

  Azure CycleCloud Remote Code Execution Vulnerability

  Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.

  Microsoft Azure CycleCloud 8.9.1
  Oct 13, 2026
• Medium 6.5
  CVE-2026-69877

  Azure DevOps Information Disclosure Vulnerability

  Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.

  Microsoft Azure CLI Azure DevOps CLI Extension
  Oct 13, 2026
• Medium 6.5
  CVE-2026-96204

  Azure Arc Elevation of Privilege Vulnerability

  Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.

  Microsoft Arc Enabled Servers - Azure Connected Machine Agent
  Oct 13, 2026
• Medium 5.9
  CVE-2026-88132

  Azure Key Vault Information Disclosure Vulnerability

  Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.

  Microsoft azure-keyvault-certificates azure-keyvault-secrets azure-keyvault-administration
  Oct 13, 2026

Revision history

1. 2026-10-13 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Microsoft Security Advisory CVE-2026-92707
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707
• Microsoft Security Advisory CVE-2026-77900
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77900
• Microsoft Security Advisory CVE-2026-85891
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85891
• Microsoft Security Advisory CVE-2026-88094
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88094
• Microsoft Security Advisory CVE-2026-88132
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88132
• Microsoft Security Advisory CVE-2026-69877
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69877
• Microsoft Security Advisory CVE-2026-96207
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96207
• Microsoft Security Advisory CVE-2026-83947
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83947
• Microsoft Security Advisory CVE-2026-96204
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96204
• Microsoft Security Advisory CVE-2026-69435
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69435
• Microsoft Security Advisory CVE-2026-100207
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-100207
• Microsoft Security Advisory CVE-2026-83943
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83943