CVEs for Microsoft Azure
206 matching vulnerabilities, 4 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-70340 Azure CycleCloud Elevation of Privilege Vulnerability
CVSS 8.1 highEPSS 0.80%Microsoft Azure
CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.86%Microsoft Azure
CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.2 highEPSS 1.0%Microsoft Azure
CVE-2026-50515 Azure Service Bus Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 1.7%Microsoft Azure
CVE-2026-56162 Azure SQL Database Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-62830 Azure SRE Agent Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%Microsoft Azure
CVE-2026-56161 Azure Logic Apps Information Disclosure Vulnerability
CVSS 9.6 criticalEPSS 0.69%Microsoft Azure
CVE-2026-68823 Azure Confidential Ledger Remote Code Execution Vulnerability
CVSS 9.1 criticalEPSS 0.93%Microsoft Azure
CVE-2026-50481 Azure Active Directory Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.82%Microsoft Azure
CVE-2026-62836 Azure SQL Managed Instance Elevation of Privilege Vulnerability
CVSS 8.7 highEPSS 0.65%Microsoft Azure
CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-62835 Azure Portal Information Disclosure Vulnerability
CVSS 9.3 criticalEPSS 0.97%Microsoft Azure
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.87%Microsoft Azure
CVE-2026-58275 Azure DNS Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%Microsoft Azure
CVE-2026-62825 Azure Key Vault Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.92%Microsoft Azure
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability
CVSS 8.0 highEPSS 0.70%Microsoft Azure
CVE-2026-56160 Azure Red Hat OpenShift (ARO) Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.79%Microsoft Azure
CVE-2026-56167 Azure AI Search Elevation of Privilege Vulnerability
CVSS 8.5 highEPSS 0.55%Microsoft Azure
CVE-2026-47632 Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.49%Microsoft Azure
CVE-2026-50653 Azure Active Directory Denial of Service Vulnerability
CVSS 7.5 highEPSS 1.2%Microsoft Azure
CVE-2026-50652 Azure Active Directory Denial of Service Vulnerability
CVSS 7.5 highEPSS 1.7%Microsoft Azure
CVE-2026-58279 Azure CycleCloud Elevation of Privilege Vulnerability
CVSS 6.5 mediumEPSS 0.64%Microsoft Azure
CVE-2026-57969 Azure CycleCloud Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.78%Microsoft Azure
CVE-2026-50338 Azure Spring Apps Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.52%Microsoft Azure
CVE-2026-26145 Microsoft Azure Synapse Elevation of Privilege Vulnerability
CVSS 4.8 mediumEPSS 0.70%Microsoft Azure
CVE-2026-45499 Azure OpenAI Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.78%Microsoft Azure
CVE-2026-48584 Microsoft Azure Synapse Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.91%Microsoft Azure
CVE-2026-45480 Azure Active Directory Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.90%Microsoft Azure
CVE-2026-32174 Azure Bot Service Elevation of Privilege Vulnerability
CVSS 7.7 highEPSS 0.77%Microsoft Azure
CVE-2026-47643 Azure Stack Edge Remote Code Execution Vulnerability
CVSS 9.8 criticalEPSS 0.75%Microsoft Azure
CVE-2026-41098 Azure Stack Edge Spoofing Vulnerability
CVSS 8.4 highEPSS 0.83%Microsoft Azure
CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
CVSS 8.8 highEPSS 0.34%Microsoft Azure
CVE-2026-48567 Azure HorizonDB Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 1.0%Microsoft Azure
CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability
CVSS 7.7 highEPSS 0.58%Microsoft Azure
CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.49%Microsoft Azure
CVE-2026-40411 Azure Virtual Network Gateway Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 0.52%Microsoft Azure
CVE-2026-40412 Azure Orbital Spatio Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.53%Microsoft Azure
CVE-2026-42822 Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.49%Microsoft Azure
CVE-2026-42830 Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability
CVSS 6.5 mediumEPSS 0.47%Microsoft Azure
CVE-2026-42823 Azure Logic Apps Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.60%Microsoft Azure
CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.22%Microsoft Azure
CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability
CVSS 8.2 highEPSS 0.50%Microsoft Azure
CVE-2026-33117 Azure SDK for Java Security Feature Bypass Vulnerability
CVSS 9.1 criticalEPSS 0.48%Microsoft Azure
CVE-2026-32204 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.29%Microsoft Azure
CVE-2026-42826 Azure DevOps Information Disclosure Vulnerability
CVSS 10.0 criticalEPSS 0.84%Microsoft Azure
CVE-2026-35428 Azure Cloud Shell Spoofing Vulnerability
CVSS 9.6 criticalEPSS 0.93%Microsoft Azure
CVE-2026-35435 Azure AI Foundry Elevation of Privilege Vulnerability
CVSS 8.6 highEPSS 1.2%Microsoft Azure
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)