Azure Confidential Ledger
Monthly
Remote code execution in Azure Confidential Ledger allows an authorized attacker with elevated privileges to invoke an exposed dangerous method over the network and run arbitrary code, with a scope change (S:C) that lets the impact reach beyond the initially compromised component. Microsoft rates it CVSS 9.1 (Critical); there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Because Azure Confidential Ledger is a managed cloud service, remediation is delivered server-side by Microsoft rather than by customer patching.
Remote code execution in Azure Confidential Ledger allows an authorized attacker with elevated privileges to invoke an exposed dangerous method over the network and run arbitrary code, with a scope change (S:C) that lets the impact reach beyond the initially compromised component. Microsoft rates it CVSS 9.1 (Critical); there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Because Azure Confidential Ledger is a managed cloud service, remediation is delivered server-side by Microsoft rather than by customer patching.