Azure Horizondb
Monthly
Privilege elevation in Microsoft Azure HorizonDB lets a remote, unauthenticated attacker spoof authentication over the network and gain unauthorized elevated access. The flaw is a network-reachable authentication bypass by spoofing (CWE-290) carrying a 9.8 CVSS with full confidentiality, integrity, and availability impact; Microsoft has issued a fix via MSRC. There is no public exploit identified at time of analysis, and EPSS remains very low (0.08%) despite the high severity.
Privilege elevation in Microsoft Azure HorizonDB lets a remote, unauthenticated attacker spoof authentication over the network and gain unauthorized elevated access. The flaw is a network-reachable authentication bypass by spoofing (CWE-290) carrying a 9.8 CVSS with full confidentiality, integrity, and availability impact; Microsoft has issued a fix via MSRC. There is no public exploit identified at time of analysis, and EPSS remains very low (0.08%) despite the high severity.