CVE-2023-38176

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Arc-enabled Servers Azure Arc Enabled Server

CVE-2024-20667

Azure DevOps Server Remote Code Execution Vulnerability

Azure DevOps Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Azure Devops Server

CVE-2023-36869

Azure DevOps Server Spoofing Vulnerability

Azure DevOps Server Spoofing Vulnerability

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Devops Server Azure Devops Server 2019 Azure Devops Server 2020 and 1 more

CVE-2024-21381

Microsoft Azure Active Directory B2C Spoofing Vulnerability

Microsoft Azure Active Directory B2C Spoofing Vulnerability

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Active Directory Azure Active Directory B2c

CVE-2021-36956

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sphere

CVE-2021-38649

Open Management Infrastructure Elevation of Privilege Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS 2.9% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 9 more

CVE-2021-38648

Open Management Infrastructure Elevation of Privilege Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 11.4% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 9 more

CVE-2021-38647

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 8 more

CVE-2021-38645

Open Management Infrastructure Elevation of Privilege Vulnerability

Open Management Infrastructure Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.7% KEV · Listed

Vendors

Microsoft

Products

Azure Automation State Configuration Azure Automation Update Management Azure Diagnostics and 8 more

CVE-2021-36943

Azure CycleCloud Elevation of Privilege Vulnerability

Azure CycleCloud Elevation of Privilege Vulnerability

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Cyclecloud

CVE-2021-36949

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

CVSS 3.1 · 7.1 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Azure Active Directory Connect Azure Active Directory Connect Provisioning Agent

CVE-2021-26430

Azure Sphere Denial of Service Vulnerability

Azure Sphere Denial of Service Vulnerability

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sphere

CVE-2021-26429

Azure Sphere Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sphere

CVE-2021-26428

Azure Sphere Information Disclosure Vulnerability

Azure Sphere Information Disclosure Vulnerability

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sphere

CVE-2021-33762

Azure CycleCloud Elevation of Privilege Vulnerability

Azure CycleCloud Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Cyclecloud

CVE-2026-68823

Azure Confidential Ledger Remote Code Execution Vulnerability

Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Confidential Ledger

CVE-2026-62836

Azure SQL Managed Instance Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sql Managed Instance

CVE-2026-50515

Azure Service Bus Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.

CVSS 3.1 · 9.9 Critical EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Azure Service Bus

CVE-2026-62830

Azure SRE Agent Elevation of Privilege Vulnerability

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sre Agent

CVE-2026-56162

Azure SQL Database Elevation of Privilege Vulnerability

Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Sql Database