Azure
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Azure product.
RSS Feeds for Azure security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Azure products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Azure Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 0 vulnerabilities in Azure. Last year, in 2025 Azure had 1 security vulnerability published. Right now, Azure is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 1 | 6.00 |
| 2024 | 1 | 8.10 |
It may take a day or so for new Azure vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Azure Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2025-21195 | Jul 08, 2025 |
Microsoft Service Fabric Priv Escalation via Link FollowingImproper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally. |
Service Fabric
|
| CVE-2024-25110 | Feb 12, 2024 |
UAMQP pre-1.3 UAF RCE via open_get_offered_capabilitiesThe UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free issue and if a client called it during connection communication it may cause a remote code execution. Users are advised to update the submodule with commit `30865c9c`. There are no known workarounds for this vulnerability. |
Uamqp
|