AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-83943

Microsoft Azure API Center: information disclosure

Microsoft

CVE-2026-83943 · Published Oct 8, 2026 · updated Oct 31, 2026

High8.7
No fix yet
Microsoft advisory

Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.

Affected versions

PackageAffectedFixed in
Azure API Center
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-200

More Microsoft advisories

All Microsoft
High 7.5Oct 13Microsoft QUIC: unauthorized attacker could bypass a security feature overCVE-2026-103577fixed in 10.0.22631.7652 +6High 7.0Oct 13Microsoft Windows: heap buffer overflowCVE-2026-103555fixed in 10.0.14393.9612 +9High 7.7Oct 13Microsoft Visual Studio Code: unauthorized attacker could bypass a security...CVE-2026-102231fixed in 1.141.1Medium 5.9Oct 7Foundry Hosting toolbox MCP client could send the hosted agent's Azure bearer token to an unintended originGHSA-r2mq-wgc9-vgh3fixed in 1.23.0-preview.260928.1High 7.5Oct 7Declarative MCP invocations may expose protected workflow values to external serversGHSA-9f26-7mqc-9vc4fixed in 1.24.0Medium 4.8Oct 7Declarative MCP approval can execute with transport headers different from those approvedGHSA-q7g7-7c7x-frcqfixed in 1.24.0