Microsoft Azure Web Apps

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-65816-Azure Arc Elevation of Privilege VulnerabilityCRITICAL 10.01.0 %
CVE-2026-32211-Azure MCP Server Information Disclosure VulnerabilityCRITICAL 9.10.9 %
CVE-2024-38194-Azure Web Apps Elevation of Privilege VulnerabilityCRITICAL 9.91.3 %