Azure Connected Machine Agent vulnerabilities
6 known CVE vulnerabilities in Azure Connected Machine Agent, translated and rated.
- CVE-2026-40381High
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-21224High
Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.
- CVE-2026-47632High
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
- CVE-2025-58724High
Azure Connected Machine Agent has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2025-47989High
Azure Connected Machine Agent has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2024-21329High
Vulnerability in Azure Connected Machine Agent allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

