fr Sign in

9.9 Critical

CVE-2026-24304 Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network

Description

Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.

Affected products and versions

Product	Affected versions	Fixed in
Azure Resource Manager	Versions not published
Azure Cosmos DB	Versions not published

References

Azure Resource Manager Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published January 23, 2026
Last modified July 30, 2026

The 3 CVEs of Azure Resource Manager →

CVE-2026-47280 Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a… 10.0 Critical CVE-2026-42822 Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges… 10.0 Critical

Track this CVE