Azure Monitor Agent (Microsoft) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 24 known versions, newest CVE from 2026-08-11. Vendor: Microsoft.
CVEs of Azure Monitor Agent
- CVE-2026-47299 - CVSS 7.2 (high), 2026-08-11: Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges…
- CVE-2026-42830 - CVSS 6.5 (medium), 2026-05-12: Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32204 - CVSS 7.8 (high), 2026-05-12: External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32192 - CVSS 7.8 (high), 2026-04-14: Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32168 - CVSS 7.8 (high), 2026-04-14: Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2025-62550 - CVSS 8.8 (high), 2025-12-09: Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.
- CVE-2025-59504 - CVSS 7.3 (high), 2025-11-11: Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.
- CVE-2025-59494 - CVSS 7.8 (high), 2025-10-14: Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2025-59285 - CVSS 7 (high), 2025-10-14: Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2025-47988 - CVSS 7.5 (high), 2025-07-08: Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2024-38097 - CVSS 7.1 (high), 2024-10-08: Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2024-35254 - CVSS 7.1 (high), 2024-06-11: Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2024-30060 - CVSS 7.8 (high), 2024-05-16: Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2024-29989 - CVSS 8.4 (high), 2024-04-09: Azure Monitor Agent Elevation of Privilege Vulnerability
