6.7
Moyenne
CVE-2026-21522 Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an…
Description
Improper neutralization of special elements used in a command ('command injection') in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft ACI Confidential Containers 1.0 | 1.0.0 → < 1.2.8 | 1.2.8 |
Références
- Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft ACI Confidential Containers
Les 5 CVE de Microsoft ACI Confidential Containers →
CVE-2026-26122
Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose…
6.5
Moyenne
CVE-2026-26124
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally
6.7
Moyenne
CVE-2026-23651
Permissive regular expression in Azure Compute Gallery allows an authorized attacker to elevate privileges locally
6.7
Moyenne
CVE-2026-23655
Cleartext storage of sensitive information in Azure Compute Gallery allows an authorized attacker to disclose…
6.5
Moyenne