CVE-2024-35254 Azure Monitor Agent Elevation of Privilege Vulnerability

Description

Azure Monitor Agent Elevation of Privilege Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Azure Monitor 1.0	1.0.0 → < 1.26.0	1.26.0

Other CVEs of Azure Monitor

The 13 CVEs of Azure Monitor →

CVE-2026-32204 External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.8 High CVE-2026-32192 Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.8 High CVE-2026-32168 Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.8 High CVE-2025-62550 Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network 8.8 High