Azure Functions (Microsoft) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-02-05. Vendor: Microsoft.

CVEs of Azure Functions

• CVE-2026-21532 - CVSS 8.2 (high), 2026-02-05: Azure Function Information Disclosure Vulnerability
• CVE-2025-33074 - CVSS 8.8 (high), 2025-04-30: Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.
• CVE-2024-49052 - CVSS 9.8 (critical), 2024-11-26: Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network.
• CVE-2024-38204 - CVSS 7.5 (high), 2024-10-15: Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.
• CVE-2020-16904 - CVSS 9.8 (critical), 2020-10-16: <p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully…