GCVE - cpe:2.3:a:microsoft:azure_functions:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_functions:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Azure Functions (`7d4c66b4-ac85-5bfc-9d66-07826cdb962c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-21532`	vulnerable	2026-06-08 07:49:16.559601	Azure Function Information Disclosure Vulnerability HIGH (8.2) Azure Function Information Disclosure Vulnerability Published: 2026-02-05T22:13:24.102Z Updated: 2026-05-11T21:25:26.964Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21532	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-33074`	vulnerable	2026-06-08 07:19:01.689525	Azure Functions Remote Code Execution Vulnerability HIGH (7.5) Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network. Published: 2025-04-30T17:14:51.166Z Updated: 2026-02-26T18:29:06.401Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33074	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-49052`	vulnerable	2026-06-08 06:50:12.236092	Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability HIGH (8.2) Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network. Published: 2024-11-26T19:44:58.433Z Updated: 2025-07-08T15:41:29.083Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49052	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-38204`	vulnerable	2026-06-08 06:41:44.149537	Imagine Cup site Information Disclosure Vulnerability HIGH (7.5) Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network. Published: 2024-10-15T22:46:38.715Z Updated: 2026-06-09T18:29:23.302Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38204	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16904`	vulnerable	2026-06-08 05:20:54.452803	Azure Functions Elevation of Privilege Vulnerability MEDIUM (5.3) <p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.</p> <p>This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions.</p> Published: 2020-10-16T22:17:42.000Z Updated: 2024-08-04T13:45:34.161Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16904	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.