7.8
Élevée
CVE-2025-58724 Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally
Description
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Arc Enabled Servers - Azure Connected Machine Agent 1.0 | 1.0.0 → < 1.57 | 1.57 |
Autres CVE de Arc Enabled Servers - Azure Connected Machine Agent
Les 4 CVE de Arc Enabled Servers - Azure Connected Machine Agent →
CVE-2026-96204
Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network
6.5
Moyenne
CVE-2026-26117
Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized…
7.8
Élevée
CVE-2025-47989
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally
7.0
Élevée