CVE-2025-21188 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2025-21188 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2025-21188

CVE-2025-21188 affects Microsoft Azure Network Watcher VM Extension. The vulnerability is described as an elevation of privilege in the VM Extension, with exploited impact limited to local attacker privileges. Nessus/Tenable notes the affected product as the Azure Network Watcher VM Extension pri...

SUSE-SU-2025:0428-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52489: mm/sparsemem: fix race in accessing memorysection-usage bsc1221326. - CVE-2024-45828: i3c: mipi-i3c-hci: Mask ring interrupts before ring stop...

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

February 11, 2025—KB5052042 (Monthly Rollup)

None None...

February 11, 2025—KB5052020 (Monthly Rollup)

None None...

February 11, 2025—Hotpatch KB5052105 (OS Build 26100.3107)

None None...

Microsoft Azure Monitor Agent Elevation of Privilege Vulnerability (CNVD-2025-03436)

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An elevation of privilege vulnerability exists in Microsoft Azure Monitor Agent, which stems from the presence of an elevation of privilege vulnerability. An attacker can exploit the...

KLA80107 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft High Performance Compute HPC Pack can be exploit...

Microsoft Azure Network Watcher VM Extension < 1.4.3563.1 Elevation of Privilege (CVE-2025-21188)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3563.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated...

Azure Linux 3.0 Security Update: xerces-c (CVE-2024-23807)

The version of xerces-c installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23807 advisory. - The Apache Xerces C++ XML parser on versions 3.0.0 before 3.2.5 contains a use-after-free error triggered...

Azure Linux 3.0 Security Update: vim (CVE-2025-24014)

The version of vim installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-24014 advisory. - Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In sile...

Azure Linux 3.0 Security Update: hwloc / openmpi (CVE-2022-47022)

The version of hwloc / openmpi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47022 advisory. - An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or...

PT-2025-6292 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension. There is no information provided about the estimated...

Azure Linux 3.0 Security Update: gh (CVE-2024-54132)

The version of gh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-54132 advisory. - The GitHub CLI is GitHub's official command line tool. A security vulnerability has been identified in GitHub CL...

Azure Linux 3.0 Security Update: nodejs / pytorch (CVE-2021-22918)

The version of nodejs / pytorch installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-22918 advisory. - Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uvidnatoascii ...

Azure Linux 3.0 Security Update: python3 (CVE-2024-6923)

The version of python3 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6923 advisory. - There is a MEDIUM severity vulnerability affecting CPython. The email module didn't properly quote newlines...

Azure Linux 3.0 Security Update: avahi (CVE-2023-38472)

The version of avahi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38472 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the avahirdataparse function...

Azure Linux 3.0 Security Update: avahi (CVE-2023-38470)

The version of avahi installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38470 advisory. - A vulnerability was found in Avahi. A reachable assertion exists in the avahiescapelabel function...