8.1Alta

CVE-2026-88094Azure Storage Library Elevation of Privilege Vulnerability

Microsoft azure-storage-blob-batch; Microsoft Microsoft Edge (Chromium-based) Publicada: (hace 1 mes)

Descripción

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.

Debilidad (CWE): CWE-74

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Microsoft azure-storage-blob-batch 1.0.0 – < 12.31.2
microsoft edge chromium 1.0.0.0 – < 153.0.4234.46
Microsoft Microsoft Edge (Chromium-based) 1.0.0.0 – < 153.0.4234.46

Referencias y parches

Coincidencias CPE (NVD) (2)

  • cpe:2.3:a:microsoft:azure-storage-blob-batch:*:*:*:*:*:java:*:* < 12.31.2
  • cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:-:*:*:* < 153.0.4234.46