Description
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure Storage Explorer | < 1.45.0 | 1.45.0 |
Advisories 2
- MSRC-CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability Microsoft Security Response Center · Aug 16, 2026
- NCSC-2026-0287 Kwetsbaarheden verholpen in Microsoft Azure NCSC-NL (Netherlands) · Aug 12, 2026
References
- Azure Storage Explorer Elevation of Privilege Vulnerability vendor-advisory patch