Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (369 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-37325 1 Microsoft 2 Azure Data Science Virtual Machine, Azure Data Science Virtual Machines 2025-12-17 8.1 High
Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability
CVE-2024-35254 1 Microsoft 1 Azure Monitor Agent 2025-12-17 7.1 High
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2024-35253 1 Microsoft 1 Azure File Sync 2025-12-17 4.4 Medium
Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVE-2024-35252 1 Microsoft 2 Azure Storage Data Movement Library, Azure Storage Movement Client Library For .net 2025-12-17 7.5 High
Azure Storage Movement Client Library Denial of Service Vulnerability
CVE-2024-35255 2 Microsoft, Redhat 12 Authentication Library, Azure Identity Library For .net, Azure Identity Library For C Plus Plus and 9 more 2025-12-17 5.5 Medium
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
CVE-2025-21188 1 Microsoft 2 Azure Network Watcher, Azure Network Watcher Agent 2025-12-17 6 Medium
Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
CVE-2025-26627 1 Microsoft 1 Azure Arc 2025-12-17 7 High
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
CVE-2025-24049 1 Microsoft 1 Azure Command-line Interface 2025-12-17 8.4 High
Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.
CVE-2025-21199 1 Microsoft 3 Azure Agent, Azure Agent For Backup, Azure Agent For Site Recovery 2025-12-17 6.7 Medium
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.
CVE-2025-21384 1 Microsoft 1 Azure Health Bot 2025-12-17 8.3 High
An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
CVE-2025-26683 1 Microsoft 1 Azure Playwright 2025-12-17 8.1 High
Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-24986 1 Microsoft 2 Azure Promptflow Core, Azure Promptflow Tools 2025-12-17 6.5 Medium
Improper isolation or compartmentalization in Azure PromptFlow allows an unauthorized attacker to execute code over a network.
CVE-2022-24468 1 Microsoft 1 Azure Site Recovery 2025-12-16 7.2 High
Azure Site Recovery Remote Code Execution Vulnerability
CVE-2025-62207 1 Microsoft 2 Azure Monitor, Azure Monitor Control Service 2025-12-16 8.6 High
Azure Monitor Elevation of Privilege Vulnerability
CVE-2025-62550 1 Microsoft 1 Azure Monitor Agent 2025-12-16 8.8 High
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.
CVE-2024-29195 1 Microsoft 1 Azure C Shared Utility 2025-12-15 6 Medium
The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used by the Azure IoT C SDK for communication between IoT Hub and IoT Hub devices. An attacker can cause an integer wraparound or under-allocation or heap buffer overflow due to vulnerabilities in parameter checking mechanism, by exploiting the buffer length parameter in Azure C SDK, which may lead to remote code execution. Requirements for RCE are 1. Compromised Azure account allowing malformed payloads to be sent to the device via IoT Hub service, 2. By passing IoT hub service max message payload limit of 128KB, and 3. Ability to overwrite code space with remote code. Fixed in commit https://github.com/Azure/azure-c-shared-utility/commit/1129147c38ac02ad974c4c701a1e01b2141b9fe2.
CVE-2025-59500 1 Microsoft 2 Azure, Azure Notification Service 2025-12-11 7.7 High
Improper access control in Azure Notification Service allows an authorized attacker to elevate privileges over a network.
CVE-2025-59503 1 Microsoft 2 Azure, Azure Compute Resource Provider 2025-12-11 10 Critical
Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-59273 1 Microsoft 3 Azure, Azure Event Grid, Azure Event Grid System 2025-12-11 7.3 High
Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-55321 1 Microsoft 1 Azure Monitor 2025-12-11 9.3 Critical
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.