CVE-2026-21224
HighSummary
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could gain higher privileges on the system, potentially leading to unauthorized access to critical resources and data.
Recommendation
It is recommended to apply available security updates for Azure Connected Machine Agent and monitor systems for unusual activity.
Other vulnerabilities in Azure Connected Machine Agent
See all- CVE-2026-40381High
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-47632High
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2024-21329High
Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Original NVD description (English source)
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.