December 9, 2025—KB5071503 (Monthly Rollup)

None None...

November 11, 2025—KB5068905 (Monthly Rollup)

None None...

December 9, 2025—Hotpatch KB5072014 (OS Build 26100.7392)

None None...

CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

October 14, 2025—KB5066873 (Monthly Rollup)

None None...

September 9, 2025—Hotpatch KB5065474 (OS Build 26100.6508)

None None...

October 23, 2025—KB5070886 (Monthly Rollup) Out-of-band

None None...

October 23, 2025—KB5070887 (Monthly Rollup) Out-of-band

None None...

EUVD-2022-40614

Malicious code in bioql PyPI...

EUVD-2022-38671

Malicious code in bioql PyPI...

EUVD-2022-40575

Malicious code in bioql PyPI...

EUVD-2025-6315

Malicious code in bioql PyPI...

EUVD-2025-27336

Malicious code in bioql PyPI...

EUVD-2024-25983

Malicious code in bioql PyPI...

EUVD-2023-42000

Malicious code in bioql PyPI...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316 Azure Connected Machine Agent Elevation of Privilege Vulnerability

...

CVE-2025-55316

CVE-2025-55316 is an elevation-of-privilege vulnerability in Microsoft Azure Arc/Azure Connected Machine Agent. External control of a file name or path is the root cause, enabling an authorized local attacker to obtain higher privileges on the affected host. The CVE is reflected in multiple feeds...