Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Azure Connected Machine Agent
Total 11 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-47632 1 Microsoft 1 Azure Connected Machine Agent 2026-07-27 N/A 8.8 HIGH
Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
CVE-2026-40381 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.8 HIGH
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-21224 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.8 HIGH
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-58724 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.8 HIGH
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-55316 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.8 HIGH
External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.
CVE-2025-49692 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.8 HIGH
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-47989 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.0 HIGH
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
CVE-2024-38162 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.8 HIGH
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2024-38098 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.8 HIGH
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2024-21329 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.3 HIGH
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2023-35624 1 Microsoft 1 Azure Connected Machine Agent 2026-06-17 N/A 7.3 HIGH
Azure Connected Machine Agent Elevation of Privilege Vulnerability