Azure Horizondb
Monthly
Privilege escalation in Azure Database for PostgreSQL allows an authenticated attacker with low privileges to elevate privileges over the network, potentially achieving full control over database resources. With a critical CVSS score of 9.9 due to scope change and high impact, the flaw requires a valid low-privileged identity to exploit; no public exploit code has been identified at time of analysis.
Privilege elevation in Microsoft Azure HorizonDB lets a remote, unauthenticated attacker spoof authentication over the network and gain unauthorized elevated access. The flaw is a network-reachable authentication bypass by spoofing (CWE-290) carrying a 9.8 CVSS with full confidentiality, integrity, and availability impact; Microsoft has issued a fix via MSRC. There is no public exploit identified at time of analysis, and EPSS remains very low (0.08%) despite the high severity.
Privilege escalation in Azure Database for PostgreSQL allows an authenticated attacker with low privileges to elevate privileges over the network, potentially achieving full control over database resources. With a critical CVSS score of 9.9 due to scope change and high impact, the flaw requires a valid low-privileged identity to exploit; no public exploit code has been identified at time of analysis.
Privilege elevation in Microsoft Azure HorizonDB lets a remote, unauthenticated attacker spoof authentication over the network and gain unauthorized elevated access. The flaw is a network-reachable authentication bypass by spoofing (CWE-290) carrying a 9.8 CVSS with full confidentiality, integrity, and availability impact; Microsoft has issued a fix via MSRC. There is no public exploit identified at time of analysis, and EPSS remains very low (0.08%) despite the high severity.