Browse CVEs

Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker t…

Payment Orchestrator Service Elevation of Privilege Vulnerability

Microsoft Devices Pricing Program Remote Code Execution Vulnerability

Semantic Kernel CRITICAL 9.9

Semantic Kernel, Microsoft's semantic kernel Python SDK, has a remote code execution vulnerability in versions prior to 1.39.4, specifically within t…

Azure Conversation Authoring Client Library CRITICAL 9.8

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.

Azure Front Door Elevation of Privilege Vulnerability

Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

Maker.js is a 2D vector line drawing and shape modeling for CNC and laser cutters. In versions up to and including 0.19.1, the `makerjs.extendObject`…

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

Azure Entra ID Elevation of Privilege Vulnerability

Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.

Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privile…

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform sp…

Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to …

Out-of-bounds read in Application Gateway allows an unauthorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network.

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.

Azure Monitor Elevation of Privilege Vulnerability

Microsoft SharePoint Online Elevation of Privilege Vulnerability

Azure Bastion Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.

Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security f…

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.