7.0
Élevée
CVE-2025-59285 Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally
Description
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure Monitor 1.0 | 1.0.0 → < 1.36.3 | 1.36.3 |
Références
- Azure Monitor Agent Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Azure Monitor
Les 13 CVE de Azure Monitor →
CVE-2026-32204
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally
7.8
Élevée
CVE-2026-32192
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally
7.8
Élevée
CVE-2026-32168
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally
7.8
Élevée
CVE-2025-62550
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network
8.8
Élevée