ByteOS Network

CVE Vulnerability Details :

CVE-2026-47280

PUBLISHED

More Info Official Page

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-22 May, 2026 | 22:03

Updated At-22 May, 2026 | 22:03

▼CVE Numbering Authority (CNA)

Azure Resource Manager Elevation of Privilege Vulnerability

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.

Affected Products

Vendor

Microsoft Corporation

Product

Azure Resource Manager

Versions

Affected

Problem Types

Type	CWE ID	Description
CWE	CWE-287	CWE-287: Improper Authentication

Type: CWE

CWE ID: CWE-287

Description: CWE-287: Improper Authentication

Metrics

Version	Base score	Base severity	Vector
3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Version: 3.1

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

References

Hyperlink	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47280	vendor-advisory patch

Hyperlink: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47280

Resource:

vendor-advisory

patch

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References