105 matches found
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges to access sensitive data or execute code that the malicious party is not initially authorized to execute. For successful abuse, the malicious...
CVE-2026-21224 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
EUVD-2026-2110
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
Azure Connected Machine Agent Elevation of Privilege Vulnerability
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
Microsoft Azure Connected Machine Agent security vulnerabilities
Microsoft Azure Connected Machine Agent is the ability of Microsoft Corporation USA to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A security vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker could exploit t...
CVE-2026-21224: Stack-based Buffer Overflow
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
Azure Connected Machine Agent Privilege Escalation
The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-47989
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
EUVD-2025-34318
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
EUVD-2025-34431
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to impersonate another user and potentially grant themselves elevated privileges, in order to gain access to sensitive data or execute arbitrary code with elevated privileges. The...
CVE-2025-47989
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-58724
CVE-2025-58724 : Affects Azure Connected Machine Agent. Description confirms an improper access control flaw that enables an authorized local attacker to escalate privileges. CVSS v3.1/3.1 base score 7.8 (HIGH) with local, low complexity, and no user interaction requirements; impact on confidenti...
CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-47989
Azure Connected Machine Agent suffers an improper access control flaw that allows an authorized, locally situated attacker to elevate privileges. Affected component: Azure Connected Machine Agent; root cause is access-control misimplementation. Impact per CVSS indicates high confidentiality, inte...
KLA89270 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain privileges. 2. An elevatio...
Microsoft Azure Connected Machine Agent Access Control Vulnerability
Microsoft Azure Connected Machine Agent is the ability of Microsoft Corporation USA to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent, which stems fr...
PT-2025-42060
Name of the Vulnerable Software and Affected Versions Azure Connected Machine Agent affected versions not specified Description An improper access control issue exists in the Azure Connected Machine Agent. A successful exploit could allow a local attacker to gain elevated privileges...
PT-2025-41994
Name of the Vulnerable Software and Affected Versions Azure Connected Machine Agent affected versions not specified Description An improper access control issue exists in the Azure Connected Machine Agent. An attacker with local access can elevate privileges. This could lead to gaining...