Most recent entries from all

bdu:2024-04789

BREW-dstack-CVE-2024-35255 — Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Affected: Homebrew: dstack

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

certfr-2024-avi-0487 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Elles permettent à un attaquant de provoquer une é…

certfr-2024-avi-0487

Withdrawn: CLEANSTART-2026-BJ92729 — Security fixes for CVE-2024-24786, CVE-2024-35255, CVE-2025-22868, CVE-2025-30204, CVE-2025-61726, CVE-2025-61728, CVE-…

Withdrawn by the publisher.

Affected: CleanStart: prometheus-operator

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details.

EUVD-2026-350245

fkie_cve-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

GHSA-m5vv-6r4h-3vj9 — Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Affected: PyPI: azure-identity, npm: @azure/identity, Maven: com.azure:azure-identity, npm: @azure/msal-node, NuGet: Microsoft.Identity.Client, Go: github.com/Azure/azure-sdk-for-go/sdk/azidentity, Maven: com.microsoft.azure:msal4j, NuGet: Azure.Identity

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

msrc_CVE-2024-35255 — Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

msrc_CVE-2024-35255

OESA-2025-2066 — restic security update

Affected: openEuler:24.03-LTS-SP2: restic

restic is a backup program. It supports verification, encryption, snapshots and deduplication. Security Fix(es):

A vulnerability was found in Microsoft Azure Identity Library and Microsoft Authentication Library (Cloud Software) (the affected version unknown). It has been rated as problematic.Using CWE to declare the problem leads to CWE-362. The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.Impacted is confidentiality.Applying a patch is able to eliminate this problem. A possible mitigation has been published immediately after the disclosure of the vulnerability.(CVE-2024-35255)

openSUSE-SU-2024:14048-1 — teleport-15.4.3-1.1 on GA media

teleport-15.4.3-1.1 on GA media

PYSEC-2026-1209 — Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Affected: PyPI: azure-identity

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

RHBA-2024:7523 — Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.0 release

micromatch: vulnerable to Regular Expression Denial of Service braces: fails to limit the number of characters it can handle dset: Prototype Pollution golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses net/http: Denial of service due to improper 100-continue handling in net/http azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity urllib3: proxy-authorization request header is not stripped during cross-origin redirects fast-loops: prototype pollution via objectMergeDeep nodejs-async: Regular expression denial of service while parsing function in autoinject express: Improper Input Handling in Express Redirects serve-static: Improper Sanitization in serve-static

WID-SEC-W-2024-1339 — Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erhöhen und um einen Denial of Service Zustand herbeizuführen.