Vendor

    Azure

    10 known vulnerabilities in products by Azure, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Azure
    CriticalCVE-2024-25110

    Azure IoT Platform Device SDK Remote Code Execution Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2024-21646

    Azure IoT Platform Device SDK Remote Code Execution Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2022-39327

    Improper Control of Generation of Code ('Code Injection') in Azure CLI

    also in 1 other product

    		8.1
    HighCVE-2024-29195

    Azure C SDK Integer Wraparound Vulnerability

    also in 1 other product

    		6.0
    CriticalCVE-2024-21638

    Azure IPAM solution Elevation of Privilege Vulnerability

    also in 1 other product

    		9.1
    CriticalCVE-2024-27099

    Azure IoT Platform Device SDK Double Free Vulnerability

    also in 1 other product

    		9.8
    HighCVE-2026-32952

    go-ntlmssp NTLM challenges can panic on malformed payloads

    also in 3 other products

    		7.5
    MediumCVE-2026-42316

    KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto

    		6.5
    MediumCVE-2022-23551

    AAD Pod Identity obtaining token with backslash

    also in 2 other products

    		5.3
    HighCVE-2023-23939

    Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower

    also in 1 other product

    		3.9

    Products

    Products by Azure
    Azure-uamqp-c30