Microsoft Azure Storage Explorer vulnerabilities

2 CVEs affecting Microsoft Azure Storage Explorer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-57104, published 2026-08-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-1416, published 2020-07-14. High severity, CVSS 8.8. EPSS: 5.9% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege…
• CVE-2026-57104, published 2026-08-11. Critical severity, CVSS 9.6. EPSS: 0.9% chance of exploitation in the next 30 days. Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.