Security Vulnerabilities
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory.
Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes virtualization boundaries.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-07-24
Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory.
Software installed and run under a Guest VM can send commands to the GPU which result in out of bounds memory accesses. These can be used to escalate privileges.
CVSS Score
7.8
EPSS Score
0.001
Published
2026-07-24
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-07-24
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-07-24
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
CVSS Score
10.0
EPSS Score
0.007
Published
2026-07-24
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
CVSS Score
9.1
EPSS Score
0.006
Published
2026-07-24
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.007
Published
2026-07-24
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.5
EPSS Score
0.004
Published
2026-07-24
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.007
Published
2026-07-24
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
CVSS Score
9.9
EPSS Score
0.013
Published
2026-07-24