CVE-2025-62550
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
An out-of-bounds write vulnerability in Azure Monitor Agent allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized attacker can remotely execute arbitrary code, potentially leading to system compromise. Organizations using Azure Monitor Agent are at risk of network-based attacks.
Recommendation
Update Azure Monitor Agent to the latest version that fixes this vulnerability. Limit privileges of authorized users and monitor for unusual activity.
Other vulnerabilities in Azure Monitor Agent
See all- CVE-2026-47299High
Improper neutralization of special elements used in a command (command injection) in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
- CVE-2026-42830Medium
Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32204High
The Azure Monitor Agent has a vulnerability related to external control of file name or path, allowing an authorized attacker to elevate privileges locally.
- CVE-2026-32192High
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-32168High
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2025-59504High
A heap-based buffer overflow exists in Azure Monitor Agent. An unauthorized attacker can exploit this vulnerability to execute code locally.
- CVE-2025-59494High
Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2025-59285High
A deserialization of untrusted data vulnerability in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- CVE-2024-35254High
A vulnerability in the Azure Monitor Agent allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS