105 matches found
KLA89270 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain privileges. 2. An elevatio...
Security Updates for Azure Connected Machine Agent < 1.56 (October 2025)
The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead...
EUVD-2024-37129
Malicious code in bioql PyPI...
EUVD-2024-19041
Malicious code in bioql PyPI...
EUVD-2025-27334
Malicious code in bioql PyPI...
Azure Connected Machine Agent Privilege Escalation
The vulnerability of the Azure Connected Machine Agent, a software tool for managing servers and virtual machines, is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...
Security Updates for Azure Connected Machine Agent < 1.49
The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead...
CVE-2025-49692
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-49692 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-49692
CVE-2025-49692 describes an elevation of privilege vulnerability in the Azure Connected Machine Agent (Azure Windows Virtual Machine Agent). The issue is due to improper access control, allowing an authorized attacker with local access and low user interaction to gain total impact (high confident...
CVE-2025-55316 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
Microsoft Azure Connected Machine Agent security vulnerabilities
Microsoft Azure Connected Machine Agent is a U.S.-based Microsoft Corporation's Microsoft ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A security vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker...
KLA87441 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Connected Machine...
CVE-2025-49692: Improper Access Control
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...
GHSA-XWGJ-VPM9-Q2RQ Vulnerable juju introspection abstract UNIX domain socket
Impact An abstract UNIX domain socket responsible for introspection is available without authentication locally to any user with access to the network namespace where the local juju agent is running. On a juju controller agent, denial of service can be performed by using the /leases/revoke...
CVE-2024-43470
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
Vulnerabilities fixed in Microsoft Azure components
Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges or impersonate another user. For successful abuse, the malicious party needs prior access to the vulnerable environment, or the malicious part...
