Microsoft Azure CVEs
206 vulnerabilities mapped to Microsoft Azure’s software or packages, 4 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.71%
CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 7.7 highEPSS 0.70%
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.67%
CVE-2026-100207 Azure CycleCloud Remote Code Execution Vulnerability
CVSS 7.3 highEPSS 0.44%
CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability
CVSS 8.1 highEPSS 0.82%
CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.52%
CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability
CVSS 7.4 highEPSS 0.61%
CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability
CVSS 5.9 mediumEPSS 0.32%
CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.46%
CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability
CVSS 7.5 highEPSS 0.92%
CVE-2026-83947 Azure Event Grid Spoofing Vulnerability
CVSS 7.7 highEPSS 0.53%
CVE-2026-83943 Azure API Center Information Disclosure Vulnerability
CVSS 8.7 highEPSS 0.54%
CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.72%
CVE-2026-69435 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.56%
CVE-2026-83946 Azure Portal Spoofing Vulnerability
CVSS 8.2 highEPSS 0.32%
CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%
CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.33%
CVE-2026-85917 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 7.5 highEPSS 0.97%
CVE-2026-85889 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.67%
CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.60%
CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.79%
CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.44%
CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability
CVSS 8.6 highEPSS 0.54%
CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.48%
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%
CVE-2026-84003 Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability
CVSS 7.4 highEPSS 0.60%
CVE-2026-81349 Azure HDInsight Ambari Elevation of Privilege Vulnerability
CVSS 7.2 highEPSS 1.0%
CVE-2026-77909 Azure CycleCloud Information Disclosure Vulnerability
CVSS 7.7 highEPSS 0.58%
CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.80%
CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability
CVSS 8.5 highEPSS 0.63%
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability
CVSS 7.7 highEPSS 0.84%
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability
CVSS 8.5 highEPSS 0.57%
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.94%
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability
CVSS 8.5 highEPSS 0.74%
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability
CVSS 8.6 highEPSS 0.97%
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.86%
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.97%
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 1.1%
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
CVSS 8.6 highEPSS 1.0%
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 9.4 criticalEPSS 0.83%
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.30%
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.84%
All vendors’ CVEs · JSON · Markdown
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)