Advisories · Technology

Microsoft Azure Cosmos DB.

Every CVE that names Microsoft Azure Cosmos DB among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87701 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Azure Cosmos DB Elevation of Privilege Vulnerability
- Microsoft Azure Cosmos DB
- Other injection
Not analysed yet 17 Sept 2026
CVE-2026-69857 CVE record

CVSS 8.5 High

Azure Cosmos DB Spoofing Vulnerability
- Microsoft Azure Cosmos DB
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-66803 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Azure Cosmos DB Remote Code Execution Vulnerability
- Microsoft Azure Cosmos DB
- Broken access control
Not analysed yet 30 Jul 2026
CVE-2025-64675 CVE record

CVSS 8.3 High

Azure Cosmos DB Spoofing Vulnerability
- Microsoft Azure Cosmos DB
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2025