CVE Intelligence

Microsoft Azure Monitor vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Azure Monitor: 9 record(s), with affected versions and fixes.
cpe:2.3:a:microsoft:azure_monitor

CVE-2026-32204 High · 7.8 CWE-610 May 12, 2026
Azure Monitor Agent Elevation of Privilege Vulnerability
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-32192 High · 7.8 CWE-502 Apr 14, 2026
Azure Monitor Agent Elevation of Privilege Vulnerability
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2026-32168 High · 7.8 CWE-20 Apr 14, 2026
Azure Monitor Agent Elevation of Privilege Vulnerability
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-62550 High · 8.8 CWE-787 Dec 9, 2025
Azure Monitor Agent Remote Code Execution Vulnerability
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.
CVE-2025-62207 Critical · 9.8 CWE-918 Nov 20, 2025
Azure Monitor Elevation of Privilege Vulnerability
Azure Monitor Elevation of Privilege Vulnerability
CVE-2025-59504 High · 7.3 CWE-122 Nov 11, 2025
Azure Monitor Agent Remote Code Execution Vulnerability
Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.
CVE-2025-59494 High · 7.8 CWE-284 Oct 14, 2025
Azure Monitor Agent Elevation of Privilege Vulnerability
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-59285 High · 7.0 CWE-502 Oct 14, 2025
Azure Monitor Agent Elevation of Privilege Vulnerability
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
CVE-2025-55321 Critical · 9.3 CWE-79 Oct 9, 2025
Azure Monitor Log Analytics Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.