Azure Virtual Machine CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-109462

Azure Firmware Security Feature Bypass Vulnerability

Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Virtual Machines

CVE-2025-49707

Azure Virtual Machines Spoofing Vulnerability

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.

CVSS 3.1 · 7.9 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Dcadsv5 Series Azure Vm Dcasv5 Series Azure Vm Dcedsv5 Series Azure Vm and 30 more

CVE-2026-69543

Azure Virtual Machines Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Virtual Machine Azure Virtual Machines

CVE-2025-53781

Azure Virtual Machines Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network.

CVSS 3.1 · 7.7 High EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Dcadsv5 Series Azure Vm Dcasv5 Series Azure Vm Dcedsv5 Series Azure Vm and 31 more

Page 1 of 1.