CVE-2026-33833: Microsoft Azure Machine Learning

High severity, CVSS 8.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Learning allows an unauthorized attacker to perform spoofing over a network.

Affected products

• Microsoft Azure Machine Learning: version 3.0.0 only

Published 2026-05-12. Last modified 2026-06-18.