Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Azure Arc
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-26627 1 Microsoft 1 Azure Arc 2026-01-20 N/A 7.0 HIGH
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
CVE-2022-38007 1 Microsoft 2 Azure Arc, Azure Guest Configuration 2025-01-02 N/A 7.8 HIGH
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability