CVE-2026-21531
Analyzed
Analyzed - Analysis Complete
Deserialization Vulnerability in Azure SDK Enables Remote Code Execution
Publication date: 2026-02-10
Last updated on: 2026-02-12
Assigner: Microsoft Corporation
Description
Description
Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | azure_conversation_authoring_client_library | 1.0.0 |
| microsoft | azure_conversation_authoring_client_library | 1.0.0 |
| microsoft | azure_conversation_authoring_client_library | 1.0.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |