Microsoft Azure Functions vulnerabilities

CVE-2020-16904 [CRITICAL] CWE-863 CVE-2020-16904: <p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</ An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization. This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions.

CVE-2025-33074 [HIGH] CWE-347 CVE-2025-33074: Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized a Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.

CVE-2026-21532 [HIGH] CWE-200 CVE-2026-21532: Azure Function Information Disclosure Vulnerability Azure Function Information Disclosure Vulnerability