Microsoft Azure CVEs
206 vulnerabilities mapped to Microsoft Azure’s software or packages, 4 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
CVSS 8.1 highEPSS 0.80%
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.86%
CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.2 highEPSS 1.0%
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 1.7%
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%
CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability
CVSS 9.6 criticalEPSS 0.69%
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.93%
CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.82%
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
CVSS 8.7 highEPSS 0.65%
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
CVSS 9.3 criticalEPSS 0.97%
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.87%
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%
CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability
CVSS 8.0 highEPSS 0.70%
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.79%
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability
CVSS 8.5 highEPSS 0.55%
CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.49%
CVE-2026-50653 Azure Active Directory Denial of Service Vulnerability
CVSS 7.5 highEPSS 1.2%
CVE-2026-50652 Azure Active Directory Denial of Service Vulnerability
CVSS 7.5 highEPSS 1.7%
CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability
CVSS 6.5 mediumEPSS 0.64%
CVE-2026-57969 Azure CycleCloud Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.78%
CVE-2026-50338 Azure Spring Apps Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.52%
CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability
CVSS 4.8 mediumEPSS 0.70%
CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%
CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.91%
CVE-2026-45480 Azure Active Directory Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%
CVE-2026-32174 Azure Bot Service Elevation of Privilege Vulnerability
CVSS 7.7 highEPSS 0.77%
CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.75%
CVE-2026-45476 Microsoft Azure Network Adapter Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.32%
CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability
CVSS 8.4 highEPSS 0.83%
CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
CVSS 8.8 highEPSS 0.34%
CVE-2026-48567 Azure HorizonDB Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 1.0%
CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability
CVSS 7.7 highEPSS 0.58%
CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.49%
CVE-2026-40411 Azure Virtual Network Gateway Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 0.52%
CVE-2026-35430 Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.43%
CVE-2026-40412 Azure Orbital Spatio Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.53%
CVE-2026-42822 Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.49%
CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
CVSS 6.5 mediumEPSS 0.47%
CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.60%
CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.22%
CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability
CVSS 8.2 highEPSS 0.50%
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability
CVSS 9.1 criticalEPSS 0.48%
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.29%
CVE-2026-42826 Azure DevOps Information Disclosure Vulnerability
CVSS 10.0 criticalEPSS 0.84%
CVE-2026-35428 Azure Cloud Shell Spoofing Vulnerability
CVSS 9.6 criticalEPSS 0.93%
CVE-2026-35435 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 8.6 highEPSS 1.2%
All vendors’ CVEs · JSON · Markdown
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)