azure_connected_machine_agent vulnerabilities
CVEs whose affected-version data names the azure_connected_machine_agent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-47632High· 8.8Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
▾ Twilightmicrosoft · azure_connected_machine_agentEPSS 0.50%via NVD
CVE-2025-58724High· 7.8Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · azure_connected_machine_agentEPSS 0.57%via NVD
CVE-2025-47989High· 7.0Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · azure_connected_machine_agentEPSS 0.55%via NVD
CVE-2025-49692High· 7.8Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.
▾ Twilightmicrosoft · azure_connected_machine_agentEPSS 0.35%via NVD