Advisories · Technology

Microsoft Azure ARC.

Every CVE that names Microsoft Azure ARC among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-69399 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Azure Arc Elevation of Privilege Vulnerability
- Microsoft Azure ARC
- CWE-441
Not analysed yet 17 Sept 2026
CVE-2026-70009 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Azure Arc Elevation of Privilege Vulnerability
- Microsoft Azure ARC
- Path traversal
Not analysed yet 17 Sept 2026
CVE-2026-69555 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Azure Arc Elevation of Privilege Vulnerability
- Microsoft Azure ARC
- Broken access control
Not analysed yet 20 Aug 2026
CVE-2026-24302 CVE record

CVSS 8.6 High

Azure Arc Elevation of Privilege Vulnerability
- Microsoft Azure ARC
- Broken access control
Not analysed yet 5 Feb 2026
CVE-2025-26627 CVE record

CVSS 7.0 High

Azure Arc Installer Elevation of Privilege Vulnerability
- Microsoft Azure ARC
- Command injection
Not analysed yet 11 Mar 2025
CVE-2022-38007 CVE record

CVSS 7.8 High

Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability
- Microsoft Azure Guest Configuration
- Microsoft Azure ARC
Not analysed yet 13 Sept 2022