Vulnerabilities

TI-2026-35143 CVE-2026-47632 · GHSA-hhxq-vhpq-pjf3

Azure Connected Machine Agent Elevation of Privilege Vulnerability

MEDIUM 41

Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00495 Published 2026-07-14 Fixed in 1.65 CWE-295

TI-2026-29155 CVE-2026-40381 · GHSA-mm5g-hh2r-m789

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 35

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2026-05-12 Fixed in 1.63 CWE-284

TI-2026-17136 CVE-2026-21224 · GHSA-9426-g97r-954q

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0032 Published 2026-01-13 Fixed in 1.60.03293.2680 CWE-121

TI-2025-36382 CVE-2025-58724 · GHSA-h3w8-46xj-f555

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 37

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00586 Published 2025-10-14 Fixed in 1.57 CWE-284

TI-2025-30375 CVE-2025-47989 · GHSA-m3vx-vrp7-pf23

Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 34

Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00564 Published 2025-10-14 Fixed in 1.57 CWE-284

TI-2025-31662 CVE-2025-49692 · GHSA-c9mp-9pqq-q7c3

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2025-09-09 Fixed in 1.49 CWE-284

TI-2025-34971 CVE-2025-55316 · GHSA-cxfc-2cj3-gw3w

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00366 Published 2025-09-09 Fixed in 1.56 CWE-73

TI-2024-25446 CVE-2024-38162 · GHSA-924r-5j98-wj3c

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 37

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00513 Published 2024-08-13 Fixed in 1.44 CWE-284

TI-2024-25385 CVE-2024-38098 · GHSA-ggjr-j3fm-frpm

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 37

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00632 Published 2024-08-13 Fixed in 1.44 CWE-59

TI-2024-14089 CVE-2024-21329 · GHSA-3vmx-4pjf-8pwv

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 36

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01088 Published 2024-02-13 Fixed in 1.38 CWE-59

TI-2023-17734 CVE-2023-35624 · GHSA-7hxh-jwwx-fv35

Azure Connected Machine Agent Elevation of Privilege Vulnerability

LOW 34

Azure Connected Machine Agent Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00875 Published 2023-12-12 Fixed in 1.37 CWE-59

Vulnerabilities

Filters