Loading story…
Microsoft disclosed multiple vulnerabilities in Azure Container Instances (ACI) Confidential Containers, including elevation of privilege issues tracked as CVE-2026-21522 and CVE-2026-26124, and an information disclosure flaw tracked as CVE-2026-23655. The advisories indicate security weaknesses affecting confidential container deployments, a technology intended to isolate sensitive workloads with stronger runtime protections.
The disclosures come against a broader backdrop of container isolation concerns highlighted by NVIDIAScape, a vulnerability in the NVIDIA Container Toolkit tracked as CVE-2025-23266. Security researchers reported that the NVIDIA flaw could allow attackers to break container boundaries in AI and GPU-enabled environments, underscoring how weaknesses in container runtimes and supporting infrastructure can undermine assumptions about workload isolation even in hardened or confidential computing deployments.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
Microsoft published a Security Update Guide entry for CVE-2026-26124, an elevation of privilege vulnerability in Microsoft ACI Confidential Containers. This appeared as a separate disclosure after the February advisories.
Microsoft added Security Update Guide entries for CVE-2026-21522, an elevation of privilege flaw, and CVE-2026-23655, an information disclosure flaw, both affecting Microsoft ACI Confidential Containers. The advisories were published on the same day.
NVIDIA Container Toolkit escape vulnerability CVE-2025-23266 was publicly disclosed, with reporting describing a container isolation break affecting AI/container environments. Technical write-ups from Wiz and ZeroPath documented the issue under the name 'NVIDIAScape.'
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
5 references tracked. Mallory keeps watching after this page renders.
msrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcewiz.io
Open sourcezeropath.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft released fixes for multiple Windows elevation-of-privilege vulnerabilities, including **CVE-2024-30093** in **Windows Storage** and **CVE-2024-30076** in the **Windows Container Manager Service**. Both issues were published through the Microsoft Security Response Center update guide as local privilege escalation flaws that could allow an attacker with existing access to gain higher privileges on affected Windows systems. The Container Manager Service issue continues a pattern of privilege escalation bugs in the same component, following earlier Microsoft advisories for **CVE-2023-36723** and **CVE-2022-30132**. The repeated appearance of elevation-of-privilege vulnerabilities in this service highlights the need for defenders to prioritize Windows security updates, especially on systems using containers or other workloads that rely on the affected components.
Jul 12, 2026
Microsoft has published multiple Security Update Guide entries for elevation-of-privilege vulnerabilities affecting cloud services including **Azure Resource Manager**, **Azure Entra ID**, **Azure AI Foundry**, and **Redis Enterprise**. The disclosed issues include `CVE-2026-47280` and `CVE-2026-24304` in Azure Resource Manager, `CVE-2026-24305` and `CVE-2025-55241` in Azure Entra ID, `CVE-2025-59271` in Redis Enterprise, and `CVE-2026-35435` in Azure AI Foundry, indicating a broader set of privilege-boundary weaknesses across Microsoft-managed platforms. Microsoft provided the most detail for **CVE-2026-35435**, describing it as a **critical** improper access control flaw in Azure AI Foundry M365 published agents that could be exploited remotely over the network without privileges or user interaction, with potential for high confidentiality impact. The company said exploitation was considered more likely, but the vulnerability had not been publicly disclosed or exploited at publication time, and the service-side issue was already fully mitigated with **no customer action required**; the remaining CVEs were listed with limited public detail in the update guide.
Jun 29, 2026
Microsoft published multiple security advisories covering **information disclosure** issues across Azure services, Windows components, and Power Automate Desktop. The disclosures include `CVE-2026-23661`, `CVE-2026-23662`, and `CVE-2026-23664` affecting **Azure IoT Explorer**; `CVE-2026-21524` affecting **Azure Data Explorer**; `CVE-2026-25186` affecting **Windows Accessibility Infrastructure (`ATBroker.exe`)**; and an earlier advisory, `CVE-2023-35625`, affecting **Azure Machine Learning Compute Instance for SDK Users**. Microsoft also listed `CVE-2026-26121` as a **spoofing** vulnerability in Azure IoT Explorer, indicating that the Azure IoT Explorer issues extend beyond data exposure alone. The most detailed advisory, **`CVE-2026-40374`**, describes an **Important** information disclosure flaw in **Microsoft Power Automate Desktop** with a **CVSS 3.1 score of 6.5**. Microsoft said a logging issue could cause values stored in variables marked as **Sensitive** to appear in execution logs uploaded to the Power Automate portal, where they may be visible to users with **Owner, Co-Owner, or Runner** permissions for the affected desktop flow. The company assessed exploitation as **less likely**, said the issue was **not publicly disclosed or exploited** at publication, and stated that an official fix is available.
Jun 29, 2026