Microsoft Cosmos Db
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Cosmos Db.
Recent Microsoft Cosmos Db Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-66803 | CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability | July 30, 2026 |
| CVE-2025-64675 | CVE-2025-64675 Azure Cosmos DB Spoofing Vulnerability | December 19, 2025 |
By the Year
In 2026 there have been 2 vulnerabilities in Microsoft Cosmos Db with an average score of 10.0 out of ten. Last year, in 2025 Cosmos Db had 1 security vulnerability published. That is, 1 more vulnerability have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 1.65.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 9.95 |
| 2025 | 1 | 8.30 |
It may take a day or so for new Cosmos Db vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Cosmos Db Security Vulnerabilities
Jul 2026: Azure Cosmos DB Remote Code Execution Vulnerability
CVE-2026-66803
10 - Critical
- July 30, 2026
Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.
Authorization
Jan 2026: Azure Resource Manager Elevation of Privilege Vulnerability
CVE-2026-24304
9.9 - Critical
- January 23, 2026
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.
Authorization
Dec 2025: Azure Cosmos DB Spoofing Vulnerability
CVE-2025-64675
8.3 - High
- December 18, 2025
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Cosmos Db or by Microsoft? Click the Watch button to subscribe.
