Total
6 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-69399 | 1 Microsoft | 1 Azure Arc | 2026-10-31 | N/A | 9.9 CRITICAL |
| Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-69555 | 1 Microsoft | 1 Azure Arc | 2026-10-18 | N/A | 10.0 CRITICAL |
| Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-70009 | 1 Microsoft | 1 Azure Arc | 2026-09-25 | N/A | 9.3 CRITICAL |
| Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2026-24302 | 1 Microsoft | 1 Azure Arc | 2026-06-17 | N/A | 8.6 HIGH |
| Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | |||||
| CVE-2025-26627 | 1 Microsoft | 1 Azure Arc | 2026-06-17 | N/A | 7.0 HIGH |
| Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2022-38007 | 1 Microsoft | 2 Azure Arc, Azure Guest Configuration | 2026-06-17 | N/A | 7.8 HIGH |
| Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability | |||||