8.8
High
CVE-2026-62895 Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges…
Description
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure Arc SQL Server Extension 1.0 | 1.0.0.0 → < 1.1.3518.465 | 1.1.3518.465 |