Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 544

Export CSV
CVE-2021-41376

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Sphere
CVE-2021-41375

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Sphere
CVE-2021-41374

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Sphere
CVE-2026-63522

Azure SQL Database Elevation of Privilege Vulnerability

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Sql Database
CVE-2026-35425

Azure API Management (APIM) Remote Code Execution Vulnerability

Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Api Management
CVE-2026-65806

Azure CycleCloud Information Disclosure Vulnerability

Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Cyclecloud
CVE-2026-70340

Azure CycleCloud Elevation of Privilege Vulnerability

Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Cyclecloud
CVE-2026-57104

Azure Storage Explorer Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure Storage Explorer
CVE-2023-44487

HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1 · 7.5 High EPSS 100.0% KEV · Listed
Vendors
Akka Amazon Apache and 30 more
Products
Http Server Opensearch Data Prepper Apisix and 375 more
CVE-2024-21397

Microsoft Azure File Sync Elevation of Privilege Vulnerability

Microsoft Azure File Sync Elevation of Privilege Vulnerability

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Azure File Sync