CVE-2022-38007

CVE-2022-38007 affects Azure Guest Configuration and Azure Arc-enabled servers. The vulnerability enables local elevation of privilege by potentially replacing Microsoft-shipped code used by the Guest Configuration daemon (and related GC Arc Service/Extension daemons) and executing it with higher...

CVE-2026-69555

Azure Arc is affected by an incorrect authorization flaw that allows an unauthenticated, remote attacker to elevate privileges over the network. The vulnerability is rated CVSS 3.1: 10.0 (CRITICAL) with a vector of AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N, indicating high confidentiality and integrity...

CVE-2026-24302

CVE-2026-24302 is an Elevation of Privilege issue in Microsoft Azure Arc caused by improper access control. An authenticated attacker could exploit a network path to elevate privileges; CVSS 3.1 vectors show network access, no user interaction, high to critical impact. Microsoft/Microsoft-affilia...