Azure vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20231
3. 20245
4. 20262

Newest CVEs

• CVE-2026-42316

  KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto

  Azure · kafka-sink-azure-kusto

  Medium5.9
• CVE-2026-32952

  go-ntlmssp NTLM challenges can panic on malformed payloads

  Azure · go-ntlmssp

  Medium5.3
• CVE-2024-29195

  Azure C SDK Integer Wraparound Vulnerability

  Azure · azure-c-shared-utility

  Medium6.0
• CVE-2024-27099

  Azure IoT Platform Device SDK Double Free Vulnerability

  Azure · azure-uamqp-c

  Critical9.8
• CVE-2024-25110

  Azure IoT Platform Device SDK Remote Code Execution Vulnerability

  Azure · azure-uamqp-c

  Critical9.8
• CVE-2024-21638

  Azure IPAM solution Elevation of Privilege Vulnerability

  Azure · ipam

  Critical9.1
• CVE-2024-21646

  Azure IoT Platform Device SDK Remote Code Execution Vulnerability

  Azure · azure-uamqp-c

  Critical9.8
• CVE-2023-23939

  Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower

  Azure · setup-kubectl

  Low3.9
• CVE-2022-23551

  AAD Pod Identity obtaining token with backslash

  Azure · aad-pod-identity

  Medium5.3
• CVE-2022-39327

  Improper Control of Generation of Code ('Code Injection') in Azure CLI

  Azure · azure-cli

  High8.1