Vulnerabilities of Microsoft Azure Machine Learning

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-68791	Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network	8.6 High	Sep 17, 2026
CVE-2026-33833	Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine…	8.2 High	May 12, 2026
CVE-2026-32207	Improper neutralization of input during web page generation ('cross-site scripting') in Azure Machine Learning allows an…	8.8 High	May 7, 2026
CVE-2025-47995	Azure Machine Learning Elevation of Privilege Vulnerability	6.5 Medium	Jul 18, 2025
CVE-2025-49747	Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network	9.9 Critical	Jul 18, 2025
CVE-2025-49746	Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network	9.9 Critical	Jul 18, 2025
CVE-2025-30390	Improper authorization in Azure allows an authorized attacker to elevate privileges over a network	9.9 Critical	Apr 30, 2025
CVE-2023-35625	Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability	4.7 Medium	Dec 12, 2023
CVE-2023-28312	Azure Machine Learning Information Disclosure Vulnerability	6.5 Medium	Apr 11, 2023
CVE-2023-23382	Azure Machine Learning Compute Instance Information Disclosure Vulnerability	6.5 Medium	Feb 14, 2023