Skip to content

Vulnerabilities of Microsoft Azure Web Apps

Is your version affected?

CVE Summary Score Published
CVE-2026-65816 Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over… 10.0 Critical Aug 20, 2026
CVE-2026-32211 Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information… 9.1 Critical Apr 2, 2026
CVE-2024-38194 An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges… 8.4 High Sep 10, 2024

Other Microsoft products