8.1Hoch

CVE-2026-88094Azure Storage Library Elevation of Privilege Vulnerability

Microsoft azure-storage-blob-batch; Microsoft Microsoft Edge (Chromium-based) Veröffentlicht: (vor 1 Monat)

Beschreibung

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

Schwachstellentyp (CWE): CWE-74

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Microsoft azure-storage-blob-batch 1.0.0 – < 12.31.2
microsoft edge chromium 1.0.0.0 – < 153.0.4234.46
Microsoft Microsoft Edge (Chromium-based) 1.0.0.0 – < 153.0.4234.46

Referenzen und Patches

CPE-Treffer (NVD) (2)

  • cpe:2.3:a:microsoft:azure-storage-blob-batch:*:*:*:*:*:java:*:* < 12.31.2
  • cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:-:*:*:* < 153.0.4234.46