Skip to content

Vulnerabilities of Microsoft Azure Monitor

Is your version affected?

CVE Summary Score Published
CVE-2026-32204 External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-32192 Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32168 Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2025-62550 Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network 8.8 High Dec 9, 2025
CVE-2025-59504 Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally 7.3 High Nov 11, 2025
CVE-2025-59285 Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.0 High Oct 14, 2025
CVE-2025-59494 Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-55321 Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an… 9.3 Critical Oct 9, 2025
CVE-2025-47988 Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to… 7.5 High Jul 8, 2025
CVE-2024-38097 Azure Monitor Agent Elevation of Privilege Vulnerability 7.1 High Oct 8, 2024
CVE-2024-35254 Azure Monitor Agent Elevation of Privilege Vulnerability 7.1 High Jun 11, 2024
CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability 7.8 High May 16, 2024
CVE-2024-29989 Azure Monitor Agent Elevation of Privilege Vulnerability 8.4 High Apr 9, 2024

Other Microsoft products