Elevation of Privilege Vulnerability in Azure Data Factory by Microsoft
CVE-2026-62834

9.3CRITICAL

Key Information:

Vendor

Microsoft
Status
Azure Data Factory
Vendor
CVE Published:
20 August 2026

What is CVE-2026-62834?

An elevation of privilege vulnerability exists in Azure Data Factory due to improper verification of cryptographic signatures. This flaw can be exploited by attackers to gain unauthorized access and elevate their privileges over a network. It poses a significant risk as it allows unauthorized manipulation of data and services within the affected product. Proper mitigation strategies should be implemented to secure the environment against potential exploitation.

Affected Version(s)

Azure Data Factory -

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.