September 9, 2025—KB5065507 (Monthly Rollup)

None None...

Azure Connected Machine Agent Elevation of Privilege Vulnerability

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

PT-2025-36895

Name of the Vulnerable Software and Affected Versions: Azure Arc affected versions not specified Description: The software contains a flaw related to external control of file name or path. This allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

Malicious code in hello-arc (npm)

The package hello-arc was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in hello-arc-windows (npm)

The package hello-arc-windows was found to contain malicious code...

MAL-2025-44589 Malicious code in hello-arc-windows (npm)

The package hello-arc-windows was found to contain malicious code...

MAL-2025-44588 Malicious code in hello-arc (npm)

The package hello-arc was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2020-35711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in the arc-swap crate before 0.4.8 and 1.x before 1.1.0 for Rust. Use of arcswap::access::Map with the Constant test helper or with...

Linux Distros Unpatched Vulnerability : CVE-2015-9275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ARC 5.21q allows directory traversal via a full pathname in an archive file. CVE-2015-9275 Note that Nessus relies on the presence of the package as reported by...

CVE-2025-55106

There is a stored Cross-site Scripting vulnerability in Esri Portal for ArcGIS Enterprise Sites versions 10.9.1 – 11.4 that may allow a remote, authenticated attacker to inject malicious a file with an embedded xss script which when loaded could potentially execute arbitrary JavaScript code in th...

July 8, 2025—KB5062592 (Monthly Rollup)

None None...

July 8, 2025—KB5062597 (Monthly Rollup)

None None...

Intel Graphics Drivers Elevation of Privilege Vulnerability

Intel Graphics Drivers is Intel's official driver for users of Arc series graphics cards, Iris Xe graphics cards and Core Ultra processors with Arc GPUs. An elevation of privilege vulnerability exists in Intel Graphics Drivers, which stems from improper default privileges and can be exploited by ...

Intel Arc B-Series graphics denial of service vulnerability

Intel Arc B-Series graphics is a line of discrete graphics cards from Intel designed for desktop gaming, content creation and artificial intelligence applications. A denial of service vulnerability exists in Intel Arc B-Series graphics, which stems from a protection mechanism failure that can be...

Intel Graphics Drivers Null Pointer Dereference Vulnerability

Intel Graphics Drivers is Intel's official driver for users of Arc series graphics cards, Iris Xe graphics cards and Core Ultra processors with Arc GPUs. A null pointer dereference vulnerability exists in Intel Graphics Drivers, which can be exploited by an attacker to cause a denial of service...

CVE-2025-34154

UnForm Server Manager versions prior to 10.1.12 expose an unauthenticated file read vulnerability via its log file analysis interface. The flaw resides in the arc endpoint, which accepts a fl parameter to specify the log file to be opened. Due to insufficient input validation and lack of path...

MAL-2025-14769 Malicious code in arc-macro-s3-bucket (npm)

The package arc-macro-s3-bucket was found to contain malicious code...

MAL-2025-14768 Malicious code in arc-branch-to-cmsg (npm)

The package arc-branch-to-cmsg was found to contain malicious code...

Malicious code in arc-macro-s3-bucket (npm)

The package arc-macro-s3-bucket was found to contain malicious code...

Malicious code in arc-branch-to-cmsg (npm)

The package arc-branch-to-cmsg was found to contain malicious code...