# Microsoft Azure in May 2026: incidents, uptime and changes

> Microsoft Azure in May 2026: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 19 CVEs. From Rewindex’s archive of Microsoft Azure’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/azure/2026/05
Last updated: 2026-10-26T20:10:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 19
- Previous month: [April 2026](https://rewindex.com/company/azure/2026/04.md) · Next: [June 2026](https://rewindex.com/company/azure/2026/06.md) · [All months](https://rewindex.com/company/azure/reports.md) · [Microsoft Azure](https://rewindex.com/company/azure.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2026-41105](https://rewindex.com/cve/CVE-2026-41105.md) Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability (CVSS 8.1), published 2026-05-07
- [CVE-2026-33109](https://rewindex.com/cve/CVE-2026-33109.md) Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability (CVSS 9.9), published 2026-05-07
- [CVE-2026-32207](https://rewindex.com/cve/CVE-2026-32207.md) Azure Machine Learning Notebook Spoofing Vulnerability (CVSS 8.8), published 2026-05-07
- [CVE-2026-33844](https://rewindex.com/cve/CVE-2026-33844.md) Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability (CVSS 9.0), published 2026-05-07
- [CVE-2026-35435](https://rewindex.com/cve/CVE-2026-35435.md) Azure AI Foundry Elevation of Privilege Vulnerability (CVSS 8.6), published 2026-05-07
- [CVE-2026-35428](https://rewindex.com/cve/CVE-2026-35428.md) Azure Cloud Shell Spoofing Vulnerability (CVSS 9.6), published 2026-05-07
- [CVE-2026-42826](https://rewindex.com/cve/CVE-2026-42826.md) Azure DevOps Information Disclosure Vulnerability (CVSS 10.0), published 2026-05-07
- [CVE-2026-32204](https://rewindex.com/cve/CVE-2026-32204.md) Azure Monitor Agent Elevation of Privilege Vulnerability (CVSS 7.8), published 2026-05-12
- [CVE-2026-33117](https://rewindex.com/cve/CVE-2026-33117.md) Azure SDK for Java Security Feature Bypass Vulnerability (CVSS 9.1), published 2026-05-12
- [CVE-2026-33833](https://rewindex.com/cve/CVE-2026-33833.md) Azure Machine Learning Notebook Spoofing Vulnerability (CVSS 8.2), published 2026-05-12
- [CVE-2026-40381](https://rewindex.com/cve/CVE-2026-40381.md) Azure Connected Machine Agent Elevation of Privilege Vulnerability (CVSS 7.8), published 2026-05-12
- [CVE-2026-42823](https://rewindex.com/cve/CVE-2026-42823.md) Azure Logic Apps Elevation of Privilege Vulnerability (CVSS 9.9), published 2026-05-12
- [CVE-2026-42830](https://rewindex.com/cve/CVE-2026-42830.md) Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability (CVSS 6.5), published 2026-05-12
- [CVE-2026-42822](https://rewindex.com/cve/CVE-2026-42822.md) Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability (CVSS 10.0), published 2026-05-18
- [CVE-2026-40412](https://rewindex.com/cve/CVE-2026-40412.md) Azure Orbital Spatio Remote Code Execution Vulnerability (CVSS 10.0), published 2026-05-22
- [CVE-2026-35430](https://rewindex.com/cve/CVE-2026-35430.md) Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability (CVSS 8.8), published 2026-05-22
- [CVE-2026-40411](https://rewindex.com/cve/CVE-2026-40411.md) Azure Virtual Network Gateway Remote Code Execution Vulnerability (CVSS 9.9), published 2026-05-22
- [CVE-2026-47280](https://rewindex.com/cve/CVE-2026-47280.md) Azure Resource Manager Elevation of Privilege Vulnerability (CVSS 10.0), published 2026-05-22
- [CVE-2026-26147](https://rewindex.com/cve/CVE-2026-26147.md) Azure Stack HCI Information Disclosure Vulnerability (CVSS 7.7), published 2026-05-22

## Cite this

Microsoft Azure posted 0 status incidents in May 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/azure/2026/05
- Citation: Microsoft Azure, “Microsoft Azure in May 2026” (2026-05-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/azure/2026/05 (CC BY 4.0).
- Markdown link: `[Microsoft Azure: Microsoft Azure in May 2026 (2026-05-01)](https://rewindex.com/company/azure/2026/05)`


---
Canonical: https://rewindex.com/company/azure/2026/05 · Markdown: https://rewindex.com/company/azure/2026/05.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T11:07:52.854Z