CVE-2026-105734
Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.
CVSS
7.0
Alta
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-732
Ainda não há histórico EPSS suficiente.
Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-859297.8 ALT—
——0Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.3hCVE-2026-1187428.6 ALT—
——0Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.2hCVE-2026-1182887.0 ALT—
——0Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.2hCVE-2026-145433.9 BAI2.8%
——1The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.16hCVE-2026-129637.4 ALT4.5%
——1A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.16hCVE-2026-1121257.3 ALT2.5%
——1Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor.
This issue affects HA Monitor: from 01-00 before 01-83-01.2h