Log in Start free

Azure

Products

ProductCVEsExploitedLatest
azure-uamqp-c3–Feb 27, 2024
azure-c-shared-utility1–Mar 26, 2024
azure-cli1–Oct 25, 2022
go-ntlmssp1–Apr 24, 2026
ipam1–Jan 10, 2024
kafka-sink-azure-kusto1–May 11, 2026
aad-pod-identity1–Dec 21, 2022
setup-kubectl1–Mar 6, 2023

Exploited and recent CVEs

  • CVE-2026-42316 Medium 5.9 KQL injection via kusto.tables.topics.mapping in kafka-sink-azure-kusto 0.3%
  • CVE-2026-32952 Medium 5.3 go-ntlmssp NTLM challenges can panic on malformed payloads 1.0%
  • CVE-2024-29195 Medium 6.0 Azure C SDK Integer Wraparound Vulnerability 5.0%
  • CVE-2024-27099 Critical 9.8 Azure IoT Platform Device SDK Double Free Vulnerability 1.4%
  • CVE-2024-25110 Critical 9.8 Azure IoT Platform Device SDK Remote Code Execution Vulnerability 7.3%
  • CVE-2024-21638 Critical 9.1 Azure IPAM solution Elevation of Privilege Vulnerability 1.7%
  • CVE-2024-21646 Critical 9.8 Azure IoT Platform Device SDK Remote Code Execution Vulnerability 5.1%
  • CVE-2023-23939 Low 3.9 Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower 0.4%
  • CVE-2022-23551 Medium 5.3 AAD Pod Identity obtaining token with backslash 0.8%
  • CVE-2022-39327 High 8.1 Improper Control of Generation of Code ('Code Injection') in Azure CLI 4.1%