CVE-2026-109462

Vendor

Microsoft

Product

Azure Virtual Machines

CVSS v3.1

4.4 AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weakness

CWE-299

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Advisory MSRC 5h ago

   Azure Firmware Security Feature Bypass Vulnerability

   Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.

   CVE-2026-109462 Microsoft
2. 35
   CVE NVD 2h ago

   Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.

   Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.

   CVSS 4.4 CVE-2026-109462 Microsoft