Search Results (6 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-69399 1 Microsoft 1 Azure Arc 2026-10-31 9.9 Critical
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.
CVE-2026-70009 1 Microsoft 1 Azure Arc 2026-09-25 9.3 Critical
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-62895 1 Microsoft 1 Azure Arc Sql Server Extension 2026-09-10 8.8 High
Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69555 1 Microsoft 1 Azure Arc 2026-08-29 10 Critical
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
CVE-2023-38176 1 Microsoft 2 Azure Arc-enabled Servers, Azure Arc Enabled Server 2026-08-10 7 High
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
CVE-2022-38007 1 Microsoft 2 Azure Arc, Azure Guest Configuration 2025-03-11 7.8 High
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability