CVE-2020-16904

CVE-2020-16904 is a critical elevation of privilege vulnerability affecting Microsoft Azure Functions, specifically related to how access keys are validated. An unauthenticated attacker could exploit this flaw to invoke HTTP Functions without proper authorization, leading to full compromise of confidentiality, integrity, and availability. While the vulnerability has a CVSS score of 9.8 and a high FAUCET Risk Score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention and one media article.