Microsoft Azure Connected Machine Agent vulnerabilities
11 known vulnerabilities affecting microsoft/azure_connected_machine_agent.
Total CVEs
11
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH11
Vulnerabilities
Page 1 of 1
CVE-2026-47632P3HIGHCVSS 8.8v1.652026-07-14
CVE-2026-47632 [HIGH] CWE-295 CVE-2026-47632: Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate pr
Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2026-21224P3HIGHCVSS 7.8fixed in 1.60≥ 1.0.0, < 1.60.03293.26802026-01-13
CVE-2026-21224 [HIGH] CWE-121 CVE-2026-21224: Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevat
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58724P3HIGHCVSS 7.8fixed in 1.572025-10-14
CVE-2025-58724 [HIGH] CWE-284 CVE-2025-58724: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate pr
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40381P3HIGHCVSS 7.8fixed in 1.63≥ 1.0.0, < 1.632026-05-12
CVE-2026-40381 [HIGH] CWE-284 CVE-2026-40381: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate pr
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55316P3HIGHCVSS 7.8fixed in 1.56≥ 1.0.0, < 1.562025-09-09
CVE-2025-55316 [HIGH] CWE-73 CVE-2025-55316: External control of file name or path in Azure Arc allows an authorized attacker to elevate privileg
External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49692P3HIGHCVSS 7.8fixed in 1.49≥ 1.0.0, < 1.492025-09-09
CVE-2025-49692 [HIGH] CWE-284 CVE-2025-49692: Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elev
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38098P3HIGHCVSS 7.8fixed in 1.44≥ 1.0.0, < 1.442024-08-13
CVE-2024-38098 [HIGH] CWE-59 CVE-2024-38098: Azure Connected Machine Agent Elevation of Privilege Vulnerability
Azure Connected Machine Agent Elevation of Privilege Vulnerability
nvd
CVE-2024-38162P3HIGHCVSS 7.8fixed in 1.44≥ 1.0.0, < 1.442024-08-13
CVE-2024-38162 [HIGH] CWE-284 CVE-2024-38162: Azure Connected Machine Agent Elevation of Privilege Vulnerability
Azure Connected Machine Agent Elevation of Privilege Vulnerability
nvd
CVE-2025-47989P3HIGHCVSS 7.0fixed in 1.572025-10-14
CVE-2025-47989 [HIGH] CWE-284 CVE-2025-47989: Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate pr
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-21329P3HIGHCVSS 7.3fixed in 1.38≥ 1.0.0, < 1.382024-02-13
CVE-2024-21329 [HIGH] CWE-59 CVE-2024-21329: Azure Connected Machine Agent Elevation of Privilege Vulnerability
Azure Connected Machine Agent Elevation of Privilege Vulnerability
nvd
CVE-2023-35624P3HIGHCVSS 7.3fixed in 1.37≥ 1.0.0, < 1.372023-12-12
CVE-2023-35624 [HIGH] CWE-59 CVE-2023-35624: Azure Connected Machine Agent Elevation of Privilege Vulnerability
Azure Connected Machine Agent Elevation of Privilege Vulnerability
nvd