Veille CVE

Recherche « Microsoft Azure ARC »

7 CVE

Critique 4 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft Azure ARC » ✕
  1. CVE-2026-96204 6.5 Moyenne

    Microsoft Arc Enabled Servers - Azure Connected Machine Agent

    Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.

  2. CVE-2026-70009 9.8 Critique

    Microsoft Azure ARC

    Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

  3. CVE-2026-69399 9.8 Critique

    Microsoft Azure ARC

    Azure Arc Elevation of Privilege Vulnerability

  4. CVE-2026-62895 8.8 Élevée

    Microsoft Azure Arc SQL Server Extension · Microsoft azure arc sql server extension

    Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

  5. CVE-2026-69555 10.0 Critique

    Microsoft Azure ARC

    Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

  6. CVE-2026-65816 10.0 Critique

    Microsoft Azure Web Apps

    Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.

  7. CVE-2026-56167 8.8 Élevée

    Microsoft Azure AI Search

    Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.