Microsoft Azure Stack Edge — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Azure Stack Edge, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-37968 — CVSS 10.0 (critical): Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability…
• CVE-2026-47643 — CVSS 9.8 (critical): External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network.
• CVE-2026-41098 — CVSS 8.4 (high): Improper neutralization of input during web page generation ('cross-site scripting') in Azure Stack Edge allows an authorized attacker to…
• CVE-2023-21703 — CVSS 6.5 (medium): Azure Data Box Gateway Remote Code Execution Vulnerability