110 matches found
CVE-2025-49692
CVE-2025-49692 describes an elevation of privilege vulnerability in the Azure Connected Machine Agent (Azure Windows Virtual Machine Agent). The issue is due to improper access control, allowing an authorized attacker with local access and low user interaction to gain total impact (high confident...
CVE-2025-55316 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
Microsoft Azure Connected Machine Agent security vulnerabilities
Microsoft Azure Connected Machine Agent is a U.S.-based Microsoft Corporation's Microsoft ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A security vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker...
KLA87441 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Connected Machine...
Vulnerabilities fixed in Microsoft Azure components
Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges or impersonate another user. For successful abuse, the malicious party needs prior access to the vulnerable environment, or the malicious part...
CVE-2024-38162
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
CVE-2024-38162
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
CVE-2024-38098
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-38162
CVE-2024-38162 concerns the Azure Connected Machine Agent with an Elevation of Privilege vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local-exploit, low-privilege requirement leading to high impact on confidentiality, integrity, and availability. Multiple s...
CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
Microsoft Azure Connected Machine Agent Access Control Vulnerability
Microsoft Azure Connected Machine Agent is a U.S. Microsoft Corporation's ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker coul...
PT-2024-27887 · Microsoft · Azure Connected Machine Agent
Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Connected Machine Agent. There is no information provided about the estimated number of...
Microsoft Azure Connected Machine Agent backend link vulnerability
Microsoft Azure Connected Machine Agent is a U.S.-based Microsoft company's ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A backlink vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker could exploit t...
Security Updates for Azure Connected Machine Agent (August 2024)
The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.44. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...
