227 matches found
CVE-2026-42830: Untrusted Search Path
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32204: External Control of File Name or Path
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
KLA91034 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Azure Machine Learning Notebook can be...
Microsoft Azure Monitor Agent 安全漏洞
Microsoft Azure Monitor Agent is a monitoring agent program developed by the American company Microsoft. There are security vulnerabilities in Microsoft Azure Monitor Agent. Attackers can exploit these vulnerabilities to gain higher privileges...
CVE-2026-41105 Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
...
CVE-2026-41105
CVE-2026-41105 affects the Azure Monitor Action Group Notification System. The issue is described as a server-side request forgery (SSRF) that allows an authorized attacker to elevate privileges over a network. Documented impact is an Elevation of Privilege (EoP) with high risk (CVSS 3.1: 8.1). C...
CVE-2026-41105 Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
...
Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Azure Notification Service allows an authorized attacker to elevate privileges over a network...
Microsoft Azure Monitor Agent Code Issue Vulnerability (CNVD-2026-18594)
Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...
Microsoft Azure Monitor Agent Input Validation Error Vulnerability (CNVD-2026-18593)
Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...
The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, stems from deficiencies in the deserialization mechanism. This allows attackers to exploit their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to enhance their privileges...
The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, stems from insufficient validation of input data. This allows attackers to exploit this flaw to increase their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to increase their privileges...
CVE-2026-32192
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32168
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit these vulnerabilities by having multiple Azure and Microsoft components fail to validate input adequately or process untrusted data insecurely, allowing an authorized attacker to increase privileges...
EUVD-2026-22559
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
EUVD-2026-22573
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32192
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...