# Microsoft Azure CVEs > Microsoft Azure: 206 CVEs mapped to its software or packages (4 in CISA KEV), newest first, with CVSS and EPSS. Canonical: https://rewindex.com/company/azure/cves Last updated: 2026-10-22T21:44:42Z 206 CVEs map to Microsoft Azure (4 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=&page=N`. Company profile: [Microsoft Azure](https://rewindex.com/company/azure.md) Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Microsoft Azure’s hosted service was exposed. | Published (UTC) | CVE | Title | CVSS | KEV | | --- | --- | --- | --- | --- | | 2026-10-22 | [CVE-2026-83938](https://rewindex.com/cve/CVE-2026-83938.md) | Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-10-22 | [CVE-2026-108456](https://rewindex.com/cve/CVE-2026-108456.md) | Azure AI Foundry Elevation of Privilege Vulnerability | 7.7 high | | | 2026-10-22 | [CVE-2026-105014](https://rewindex.com/cve/CVE-2026-105014.md) | Azure Pipelines Remote Code Execution Vulnerability | 9.1 critical | | | 2026-10-13 | [CVE-2026-100207](https://rewindex.com/cve/CVE-2026-100207.md) | Azure CycleCloud Remote Code Execution Vulnerability | 7.3 high | | | 2026-10-13 | [CVE-2026-88094](https://rewindex.com/cve/CVE-2026-88094.md) | Azure Storage Library Elevation of Privilege Vulnerability | 8.1 high | | | 2026-10-13 | [CVE-2026-85925](https://rewindex.com/cve/CVE-2026-85925.md) | Azure Key Vault Client SDK Elevation of Privilege Vulnerability | 8.2 high | | | 2026-10-13 | [CVE-2026-85922](https://rewindex.com/cve/CVE-2026-85922.md) | Azure Key Vault Security Feature Bypass Vulnerability | 7.4 high | | | 2026-10-13 | [CVE-2026-88132](https://rewindex.com/cve/CVE-2026-88132.md) | Azure Key Vault Information Disclosure Vulnerability | 5.9 medium | | | 2026-10-13 | [CVE-2026-69877](https://rewindex.com/cve/CVE-2026-69877.md) | Azure DevOps Information Disclosure Vulnerability | 6.5 medium | | | 2026-10-13 | [CVE-2026-85891](https://rewindex.com/cve/CVE-2026-85891.md) | Azure HDInsight Information Disclosure Vulnerability | 7.5 high | | | 2026-10-08 | [CVE-2026-83947](https://rewindex.com/cve/CVE-2026-83947.md) | Azure Event Grid Spoofing Vulnerability | 7.7 high | | | 2026-10-08 | [CVE-2026-83943](https://rewindex.com/cve/CVE-2026-83943.md) | Azure API Center Information Disclosure Vulnerability | 8.7 high | | | 2026-10-08 | [CVE-2026-77900](https://rewindex.com/cve/CVE-2026-77900.md) | Azure App Service Remote Code Execution Vulnerability | 9.8 critical | | | 2026-10-08 | [CVE-2026-69435](https://rewindex.com/cve/CVE-2026-69435.md) | Azure SRE Agent Elevation of Privilege Vulnerability | 9.6 critical | | | 2026-09-17 | [CVE-2026-83946](https://rewindex.com/cve/CVE-2026-83946.md) | Azure Portal Spoofing Vulnerability | 8.2 high | | | 2026-09-17 | [CVE-2026-85878](https://rewindex.com/cve/CVE-2026-85878.md) | Azure Database for PostgreSQL Elevation of Privilege Vulnerability | 9.9 critical | | | 2026-09-17 | [CVE-2026-62874](https://rewindex.com/cve/CVE-2026-62874.md) | Azure Billing Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-09-17 | [CVE-2026-85917](https://rewindex.com/cve/CVE-2026-85917.md) | Azure AI Foundry Elevation of Privilege Vulnerability | 7.5 high | | | 2026-09-17 | [CVE-2026-85889](https://rewindex.com/cve/CVE-2026-85889.md) | Azure AI Foundry Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-09-17 | [CVE-2026-70200](https://rewindex.com/cve/CVE-2026-70200.md) | Azure Logic Apps Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-09-17 | [CVE-2026-87701](https://rewindex.com/cve/CVE-2026-87701.md) | Azure Cosmos DB Elevation of Privilege Vulnerability | 9.6 critical | | | 2026-09-17 | [CVE-2026-83944](https://rewindex.com/cve/CVE-2026-83944.md) | Azure Logic Apps Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-09-17 | [CVE-2026-68791](https://rewindex.com/cve/CVE-2026-68791.md) | Azure Machine Learning Information Disclosure Vulnerability | 8.6 high | | | 2026-09-17 | [CVE-2026-69399](https://rewindex.com/cve/CVE-2026-69399.md) | Azure Arc Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-09-17 | [CVE-2026-69865](https://rewindex.com/cve/CVE-2026-69865.md) | Microsoft Container Registry Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-09-17 | [CVE-2026-70009](https://rewindex.com/cve/CVE-2026-70009.md) | Azure Arc Elevation of Privilege Vulnerability | 9.3 critical | | | 2026-09-08 | [CVE-2026-84003](https://rewindex.com/cve/CVE-2026-84003.md) | Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability | 7.4 high | | | 2026-09-08 | [CVE-2026-81349](https://rewindex.com/cve/CVE-2026-81349.md) | Azure HDInsight Ambari Elevation of Privilege Vulnerability | 7.2 high | | | 2026-09-08 | [CVE-2026-77909](https://rewindex.com/cve/CVE-2026-77909.md) | Azure CycleCloud Information Disclosure Vulnerability | 7.7 high | | | 2026-09-08 | [CVE-2026-62895](https://rewindex.com/cve/CVE-2026-62895.md) | Azure Arc SQL Server Extension Elevation of Privilege Vulnerability | 8.8 high | | | 2026-09-03 | [CVE-2026-69857](https://rewindex.com/cve/CVE-2026-69857.md) | Azure Cosmos DB Spoofing Vulnerability | 8.5 high | | | 2026-09-03 | [CVE-2026-83711](https://rewindex.com/cve/CVE-2026-83711.md) | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-09-03 | [CVE-2026-70352](https://rewindex.com/cve/CVE-2026-70352.md) | Azure AI Language Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-08-21 | [CVE-2026-69502](https://rewindex.com/cve/CVE-2026-69502.md) | Azure SQL Database Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-08-20 | [CVE-2026-69855](https://rewindex.com/cve/CVE-2026-69855.md) | Microsoft Copilot in Azure Information Disclosure Vulnerability | 7.7 high | | | 2026-08-20 | [CVE-2026-69543](https://rewindex.com/cve/CVE-2026-69543.md) | Azure Virtual Machines Elevation of Privilege Vulnerability | 8.5 high | | | 2026-08-20 | [CVE-2026-69555](https://rewindex.com/cve/CVE-2026-69555.md) | Azure Arc Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-08-20 | [CVE-2026-69400](https://rewindex.com/cve/CVE-2026-69400.md) | Azure Logic Apps Elevation of Privilege Vulnerability | 9.6 critical | | | 2026-08-20 | [CVE-2026-69419](https://rewindex.com/cve/CVE-2026-69419.md) | Azure Data Manager for Energy Remote Code Execution Vulnerability | 8.5 high | | | 2026-08-20 | [CVE-2026-68782](https://rewindex.com/cve/CVE-2026-68782.md) | Azure SQL Database Elevation of Privilege Vulnerability | 9.9 critical | | | 2026-08-20 | [CVE-2026-66800](https://rewindex.com/cve/CVE-2026-66800.md) | Azure Data Factory Information Disclosure Vulnerability | 8.6 high | | | 2026-08-20 | [CVE-2026-66309](https://rewindex.com/cve/CVE-2026-66309.md) | Azure SQL Database Elevation of Privilege Vulnerability | 9.1 critical | | | 2026-08-20 | [CVE-2026-65816](https://rewindex.com/cve/CVE-2026-65816.md) | Azure Arc Elevation of Privilege Vulnerability | 10.0 critical | | | 2026-08-20 | [CVE-2026-65770](https://rewindex.com/cve/CVE-2026-65770.md) | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | 10.0 critical | | | 2026-08-20 | [CVE-2026-69519](https://rewindex.com/cve/CVE-2026-69519.md) | Azure Stack HCI Information Disclosure Vulnerability | 8.6 high | | | 2026-08-20 | [CVE-2026-68789](https://rewindex.com/cve/CVE-2026-68789.md) | Azure SQL Database Elevation of Privilege Vulnerability | 9.9 critical | | | 2026-08-20 | [CVE-2026-62834](https://rewindex.com/cve/CVE-2026-62834.md) | Azure Data Factory Elevation of Privilege Vulnerability | 9.3 critical | | | 2026-08-11 | [CVE-2026-50516](https://rewindex.com/cve/CVE-2026-50516.md) | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | 9.4 critical | | | 2026-08-11 | [CVE-2026-63522](https://rewindex.com/cve/CVE-2026-63522.md) | Azure SQL Database Elevation of Privilege Vulnerability | 7.8 high | | | 2026-08-11 | [CVE-2026-65806](https://rewindex.com/cve/CVE-2026-65806.md) | Azure CycleCloud Information Disclosure Vulnerability | 6.5 medium | | Next page: [page 2](https://rewindex.com/company/azure/cves.md?page=2) --- _Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_ ## Charts ### Chart data: CVEs per week, last 52 weeks (Microsoft Azure) Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial. | Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV | | --- | --- | --- | --- | --- | --- | --- | | 2025-11-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-10 | 0 | 1 | 0 | 0 | 0 | 0 | | 2025-11-17 | 1 | 1 | 0 | 0 | 0 | 0 | | 2025-11-24 | 2 | 0 | 0 | 0 | 0 | 0 | | 2025-12-01 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-08 | 0 | 1 | 0 | 0 | 0 | 0 | | 2025-12-15 | 2 | 1 | 0 | 0 | 0 | 0 | | 2025-12-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-05 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-12 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-01-19 | 2 | 2 | 0 | 0 | 0 | 0 | | 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-02 | 1 | 2 | 0 | 0 | 0 | 0 | | 2026-02-09 | 1 | 1 | 3 | 0 | 0 | 0 | | 2026-02-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-02 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-09 | 0 | 8 | 0 | 0 | 0 | 0 | | 2026-03-16 | 1 | 2 | 0 | 0 | 0 | 0 | | 2026-03-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-30 | 5 | 1 | 0 | 0 | 0 | 0 | | 2026-04-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-13 | 0 | 3 | 0 | 0 | 0 | 0 | | 2026-04-20 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-04 | 4 | 3 | 0 | 0 | 0 | 0 | | 2026-05-11 | 2 | 3 | 1 | 0 | 0 | 0 | | 2026-05-18 | 4 | 2 | 0 | 0 | 0 | 0 | | 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-01 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-06-08 | 1 | 3 | 0 | 0 | 0 | 0 | | 2026-06-15 | 2 | 1 | 0 | 0 | 0 | 0 | | 2026-06-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-29 | 1 | 0 | 1 | 0 | 0 | 0 | | 2026-07-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-13 | 0 | 5 | 1 | 0 | 0 | 0 | | 2026-07-20 | 6 | 2 | 0 | 0 | 0 | 0 | | 2026-07-27 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-08-03 | 6 | 1 | 0 | 0 | 0 | 0 | | 2026-08-10 | 1 | 4 | 1 | 0 | 0 | 0 | | 2026-08-17 | 9 | 5 | 0 | 0 | 0 | 0 | | 2026-08-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-31 | 2 | 1 | 0 | 0 | 0 | 0 | | 2026-09-07 | 0 | 4 | 0 | 0 | 0 | 0 | | 2026-09-14 | 9 | 3 | 0 | 0 | 0 | 0 | | 2026-09-21 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-28 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-05 | 2 | 2 | 0 | 0 | 0 | 0 | | 2026-10-12 | 0 | 5 | 2 | 0 | 0 | 0 | | 2026-10-19 | 2 | 1 | 0 | 0 | 0 | 0 | | 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 | --- Canonical: https://rewindex.com/company/azure/cves · Markdown: https://rewindex.com/company/azure/cves.md · JSON: https://rewindex.com/api/v1/companies/azure/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:13:15.735Z