CVE-2025-49692
published 2025-09-09CVE-2025-49692: Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_connected_machine_agent | < 1.49 | 1.49 |
| microsoft | azure_connected_machine_agent | >= 1.0.0 < 1.49 | 1.49 |
| msrc | azure_connected_machine_agent | — | — |