Microsoft Azure Functions
5 CVEs affecting Microsoft Azure Functions. Latest disclosed: 2026-02-05. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-21532 | High | 8.2 | 2026-02-05 | Azure Function Information Disclosure Vulnerability |
CVE-2024-49052 | High | 8.2 | 2024-11-26 | Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-33074 | High | 7.5 | 2025-04-30 | Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network. |
CVE-2024-38204 | High | 7.5 | 2024-10-15 | Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network. |
CVE-2020-16904 | Medium | 5.3 | 2020-10-16 | <p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully exploite… |