Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-57104

Опубликовано: 11 авг. 2026
Источник: msrc
CVSS3: 8.8
EPSS Низкий

Описание

Azure Storage Explorer Elevation of Privilege Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.

FAQ

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker who successfully exploited this vulnerability could potentially gain the ability to authenticate against a remote host using the current user’s credentials.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

Exploitation of the vulnerability requires that a user to open a specially crafted link.

An attacker would have no way to force users to click the link. Instead, an attacker would have to convince users to click the link through social engineering.

Обновления

ПродуктСтатьяОбновление
Azure Storage Explorer

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 54%
0.00808
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
28 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.

CVSS3: 8.8
github
28 дней назад

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.

EPSS

Процентиль: 54%
0.00808
Низкий

8.8 High

CVSS3