CVE-2024-35254
HighCVSS 7.1Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
A vulnerability in the Azure Monitor Agent allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Risk Assessment
The risk for the organization is the potential for unauthorized access to sensitive data and resources by an attacker with lower privileges.
Recommendation
It is recommended to immediately apply the security update provided by Microsoft for the Azure Monitor Agent.
Other vulnerabilities in Azure Monitor Agent
See all- CVE-2026-32192High
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32168High
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-47299High
Improper neutralization of special elements used in a command (command injection) in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
- CVE-2026-32204High
The Azure Monitor Agent has a vulnerability related to external control of file name or path, allowing an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Azure Monitor Agent Elevation of Privilege Vulnerability