CVEs for Microsoft Azure
206 matching vulnerabilities, 4 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.71%Microsoft Azure
CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 7.7 highEPSS 0.70%Microsoft Azure
CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.67%Microsoft Azure
CVE-2026-100207 Azure CycleCloud Remote Code Execution Vulnerability
CVSS 7.3 highEPSS 0.44%Microsoft Azure
CVE-2026-88094 Azure Storage Library Elevation of Privilege Vulnerability
CVSS 8.1 highEPSS 0.82%Microsoft Azure
CVE-2026-85925 Azure Key Vault Client SDK Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.52%Microsoft Azure
CVE-2026-85922 Azure Key Vault Security Feature Bypass Vulnerability
CVSS 7.4 highEPSS 0.61%Microsoft Azure
CVE-2026-88132 Azure Key Vault Information Disclosure Vulnerability
CVSS 5.9 mediumEPSS 0.32%Microsoft Azure
CVE-2026-69877 Azure DevOps Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.46%Microsoft Azure
CVE-2026-85891 Azure HDInsight Information Disclosure Vulnerability
CVSS 7.5 highEPSS 0.92%Microsoft Azure
CVE-2026-83947 Azure Event Grid Spoofing Vulnerability
CVSS 7.7 highEPSS 0.53%Microsoft Azure
CVE-2026-83943 Azure API Center Information Disclosure Vulnerability
CVSS 8.7 highEPSS 0.54%Microsoft Azure
CVE-2026-77900 Azure App Service Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.72%Microsoft Azure
CVE-2026-69435 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.56%Microsoft Azure
CVE-2026-83946 Azure Portal Spoofing Vulnerability
CVSS 8.2 highEPSS 0.32%Microsoft Azure
CVE-2026-85878 Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%Microsoft Azure
CVE-2026-62874 Azure Billing Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.33%Microsoft Azure
CVE-2026-85917 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 7.5 highEPSS 0.97%Microsoft Azure
CVE-2026-85889 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.67%Microsoft Azure
CVE-2026-70200 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.60%Microsoft Azure
CVE-2026-87701 Azure Cosmos DB Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.79%Microsoft Azure
CVE-2026-83944 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.44%Microsoft Azure
CVE-2026-68791 Azure Machine Learning Information Disclosure Vulnerability
CVSS 8.6 highEPSS 0.54%Microsoft Azure
CVE-2026-69399 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.48%Microsoft Azure
CVE-2026-69865 Microsoft Container Registry Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-70009 Azure Arc Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%Microsoft Azure
CVE-2026-81349 Azure HDInsight Ambari Elevation of Privilege Vulnerability
CVSS 7.2 highEPSS 1.0%Microsoft Azure
CVE-2026-77909 Azure CycleCloud Information Disclosure Vulnerability
CVSS 7.7 highEPSS 0.58%Microsoft Azure
CVE-2026-62895 Azure Arc SQL Server Extension Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.80%Microsoft Azure
CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability
CVSS 8.5 highEPSS 0.63%Microsoft Azure
CVE-2026-83711 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-70352 Azure AI Language Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-69855 Microsoft Copilot in Azure Information Disclosure Vulnerability
CVSS 7.7 highEPSS 0.84%Microsoft Azure
CVE-2026-69543 Azure Virtual Machines Elevation of Privilege Vulnerability
CVSS 8.5 highEPSS 0.57%Microsoft Azure
CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.80%Microsoft Azure
CVE-2026-69400 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.6 criticalEPSS 0.94%Microsoft Azure
CVE-2026-69419 Azure Data Manager for Energy Remote Code Execution Vulnerability
CVSS 8.5 highEPSS 0.74%Microsoft Azure
CVE-2026-68782 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%Microsoft Azure
CVE-2026-66800 Azure Data Factory Information Disclosure Vulnerability
CVSS 8.6 highEPSS 0.97%Microsoft Azure
CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.86%Microsoft Azure
CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.97%Microsoft Azure
CVE-2026-65770 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 1.1%Microsoft Azure
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
CVSS 8.6 highEPSS 1.0%Microsoft Azure
CVE-2026-68789 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.99%Microsoft Azure
CVE-2026-62834 Azure Data Factory Elevation of Privilege Vulnerability
CVSS 9.3 criticalEPSS 0.53%Microsoft Azure
CVE-2026-50516 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 9.4 criticalEPSS 0.83%Microsoft Azure
CVE-2026-63522 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.30%Microsoft Azure
CVE-2026-65806 Azure CycleCloud Information Disclosure Vulnerability
CVSS 6.5 mediumEPSS 0.84%Microsoft Azure
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)