Microsoft Azure CVEs
87 matching vulnerabilities mapped to Microsoft Azure’s software or packages, 1 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.71%
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.67%
CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.72%
CVE-2026-69435 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.56%
CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%
CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.33%
CVE-2026-85889 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.67%
CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.60%
CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.79%
CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.44%
CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.48%
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.94%
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.86%
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.97%
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 1.1%
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 9.4 criticalEPSS 0.83%
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 1.7%
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%
CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability
CVSS 9.6 criticalEPSS 0.69%
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.93%
CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.82%
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
CVSS 9.3 criticalEPSS 0.97%
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.87%
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%
CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.79%
CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%
CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.91%
CVE-2026-45480 Azure Active Directory Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.75%
CVE-2026-48567 Azure HorizonDB Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 1.0%
CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.49%
CVE-2026-40411 Azure Virtual Network Gateway Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 0.52%
CVE-2026-40412 Azure Orbital Spatio Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.53%
CVE-2026-42822 Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.49%
CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.60%
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability
CVSS 9.1 criticalEPSS 0.48%
CVE-2026-42826 Azure DevOps Information Disclosure Vulnerability
CVSS 10.0 criticalEPSS 0.84%
All vendors’ CVEs · JSON · Markdown
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)