Cross-Site Scripting Vulnerability in Azure Machine Learning by Microsoft
CVE-2026-32207

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Azure Machine Learning
Vendor
CVE Published:
7 May 2026

What is CVE-2026-32207?

A cross-site scripting vulnerability exists in Azure Machine Learning due to improper handling of input during web page generation. An attacker could exploit this flaw to inject malicious scripts into web pages viewed by users, potentially leading to spoofing attacks and unauthorized actions performed on behalf of the victim.

Affected Version(s)

Azure Machine Learning -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.