azure_monitor vulnerabilities
CVEs whose affected-version data names the azure_monitor package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-32168High· 7.8Azure Monitor Agent Elevation of Privilege Vulnerability
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
▾ TwilightMicrosoft · Azure MonitorEPSS 0.31%via CVEORG
CVE-2026-32192High· 7.8Azure Monitor Agent Elevation of Privilege Vulnerability
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
▾ TwilightMicrosoft · Azure MonitorEPSS 1.9%via CVEORG
CVE-2025-55321Critical· 9.3Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.
▾ Midnightmicrosoft · azure_monitorEPSS 0.44%via NVD