Microsoft Azure Arc vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Azure Arc: 4 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:azure_arc
CVE-2026-70009
Critical · 9.8
CWE-22 Sep 17, 2026
Azure Arc Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69399
Critical · 9.8
CWE-441 Sep 17, 2026
Azure Arc Elevation of Privilege Vulnerability
Azure Arc Elevation of Privilege Vulnerability
CVE-2026-69555
Critical · 10.0
CWE-863 Aug 20, 2026
Azure Arc Elevation of Privilege Vulnerability
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-24302
Critical · 9.8
CWE-284 Feb 5, 2026
Microsoft Azure Arc: improper access control (CWE-284)
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.