Azure Monitor Agent Elevation of Privilege Vulnerability

Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

PT-2025-42155

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An improper access control issue exists in Azure Monitor Agent. An authorized attacker can elevate privileges locally. Recommendations At the moment, there is no information about...

PT-2025-41994

Name of the Vulnerable Software and Affected Versions Azure Connected Machine Agent affected versions not specified Description An improper access control issue exists in the Azure Connected Machine Agent. An attacker with local access can elevate privileges. This could lead to gaining...

CVE-2025-47989: Improper Access Control

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

CVE-2025-58724: Improper Access Control

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...

Security Updates for Azure Connected Machine Agent < 1.56 (October 2025)

The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. Note that Nessus has not tested for this issue but has instead...

PT-2025-42060

Name of the Vulnerable Software and Affected Versions Azure Connected Machine Agent affected versions not specified Description An improper access control issue exists in the Azure Connected Machine Agent. A successful exploit could allow a local attacker to gain elevated privileges...

Microsoft Azure Connected Machine Agent 访问控制错误漏洞

Microsoft Azure Connected Machine Agent is the ability of Microsoft Corporation USA to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent, which stems fr...

PT-2025-42470

Name of the Vulnerable Software and Affected Versions Fortinet FortiDLP Agent versions 10.3.1, 10.4.0, 10.5.1, 11.0.1, 11.1.1 through 11.1.2, 11.2.0 through 11.2.3, 11.3.2 through 11.3.4, 11.4.2 through 11.4.6, and 11.5.1 Description An improper limitation of a pathname to a restricted directory...

PT-2025-42468

Name of the Vulnerable Software and Affected Versions Fortinet FortiDLP Agent versions 10.3.1, 10.4.0, 10.5.1, 11.0.1, 11.1.1 through 11.1.2, 11.2.0 through 11.2.3, 11.3.2 through 11.3.4, 11.4.2 through 11.4.6, and 11.5.1 Description A flaw exists in the Fortinet FortiDLP Agent’s Outlookproxy...

KLA89270 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain privileges. 2. An elevatio...

CVE-2025-59494: Improper Access Control

Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

PT-2025-42146

Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description An issue exists in Azure Monitor Agent where deserialization of untrusted data can allow an authorized attacker to elevate privileges locally. Recommendations At the moment, there...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Issue Correction: Run dnf update amazon-cloudwatch-agent --releasever 2023.9.20251014 or dnf update --advisory ALAS2023-2025-1224...

Microsoft Azure Connected Machine Agent 访问控制错误漏洞

Microsoft Azure Connected Machine Agent is the ability of Microsoft Corporation USA to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent, which stems fr...

Medium: amazon-cloudwatch-agent

Issue Overview: go-viper's mapstructure May Leak Sensitive Information in Logs When Processing Malformed Data CVE-2025-11065 Affected Packages: amazon-cloudwatch-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Co...

PT-2025-42398

Name of the Vulnerable Software and Affected Versions Veeam Agent for Microsoft Windows affected versions not specified Description The issue resides in insufficient input validation within Veeam Agent for Microsoft Windows. Successful exploitation could allow an attacker to elevate their...

Veeam Agent for Microsoft Windows 6.3.2.1302 Private Fix Deployment Information

Article Applicability This article documents the Veeam Agent for Microsoft Windows private fix deployment procedure for customers who have recently installed Veeam Backup & Replication 12.3.2.4165 Patch. That patch to Veeam Backup & Replication includes a private fix for Veeam Agent for Microsoft...

Microsoft Azure Monitor Agent < 1.38.1.0 Elevation of Privilege (CVE-2025-59494)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.38.1.0. It is, therefore, affected by a elevation of privilege vulnerability. Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessus has no...