Azure Web Apps

azure_web_apps

Vendor: Microsoft • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-65816 1Microsoft 1Azure Web Apps Aug 24, 2026 Aug 20, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-32211 1Microsoft 1Azure Web Apps Jul 24, 2026 Apr 3, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.
CVE-2024-38194 1Microsoft 1Azure Web Apps Aug 10, 2026 Sep 10, 2024 N/A· v4 9.9 CRITICAL· v3 N/A· v2 An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.