CVE-2024-49052

—1

CVSS 3.1

9.8 critical

EPSS

<1%p51

Published

Nov 26, 2024 (Nov 26, 2024)

Modified

Jun 17, 2026

Description

Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: azure functions
Weakness: CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news1 stories

Microsoft Fixes AI, Cloud, and ERP Security Flaws; One Exploited in Active Attacks

The Hacker NewsDec 1, 07:13 UTC · Dec 1, 2024Exploit / PoC in the wildCVE-2024-49035 CVE-2024-49038 CVE-2024-49052+1 CVEs1

60