Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

10 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-26141	Analizada	Alta (7.8)	0.30%	—	Microsoft Azure Automation Hybrid Worker Windows Extension	10/3/2026	17/6/2026	Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.
CVE-2025-29827	Analizada	Alta (8.8)	1.7%	—	Microsoft Azure Automation	8/5/2025	17/6/2026	Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network.
CVE-2024-21330	Analizada	Alta (7.8)	0.99%	—	Microsoft Azure Automation Microsoft Azure Automation Update Management Microsoft Azure Security Center Microsoft Azure Sentinel+4	12/3/2024	17/6/2026	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2022-29149	Modificada	Alta (7.8)	0.92%	—	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics Microsoft Azure Security Center+6	15/6/2022	17/6/2026	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2021-42306	Modificada	Media (6.5)	3.3%	—	Microsoft Azure Active Directory Microsoft Azure Active Site Recovery Microsoft Azure Automation Microsoft Azure Migrate	24/11/2021	19/8/2026	An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential on an Azure AD Application or Service Principal (which is not recommended). This vulnerability allows a user or service in the tenant with…
CVE-2021-38649	Analizada	Alta (7.8)	2.9%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648	Analizada	Alta (7.8)	11%	⚠ Explotación activa💥 Exploit	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Open Management Infrastructure+7	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38647	Analizada	Crítica (9.8)	100%	⚠ Explotación activa💥 Exploit	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Security Center+6	15/9/2021	10/8/2026	Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVE-2021-38645	Analizada	Alta (7.8)	2.7%	⚠ Explotación activa	Microsoft Azure Automation State Configuration Microsoft Azure Automation Update Management Microsoft Azure Diagnostics (lad)Microsoft Azure Security Center+6	15/9/2021	10/8/2026	Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2019-0962	Modificada	Media (4.9)	4.3%	—	Microsoft Azure Automation	15/7/2019	17/6/2026	An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor role, aka 'Azure Automation Elevation of Privilege Vulnerability'.