7.8
Élevée
CVE-2026-40381 Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally
Description
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Azure Connected Machine Agent 1.0 | 1.0.0 → < 1.63 | 1.63 |
Références
- Azure Connected Machine Agent Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Azure Connected Machine Agent
Les 9 CVE de Azure Connected Machine Agent →
CVE-2026-47632
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges…
8.8
Élevée
CVE-2026-21224
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally
7.8
Élevée
CVE-2025-49692
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges…
7.8
Élevée
CVE-2025-55316
External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally
7.8
Élevée