Azure Language
by Microsoft
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-70352 | Cri | 0.65 | 10.0 | 0.01 | Sep 3, 2026 | Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network. | ||
| CVE-2026-21531 | Cri | 0.64 | 9.8 | 0.03 | Feb 10, 2026 | Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-64663 | Cri | 0.64 | 9.9 | 0.01 | Dec 18, 2025 | Custom Question Answering Elevation of Privilege Vulnerability |
- risk 0.65cvss 10.0epss 0.01
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
- risk 0.64cvss 9.8epss 0.03
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.
- risk 0.64cvss 9.9epss 0.01
Custom Question Answering Elevation of Privilege Vulnerability