HarborGuard / CVE
Back to search
HIGHCVE-2026-21224Published Modified CNA microsoft

CVE-2026-21224: Azure Connected Machine Agent Elevation of Privilege Vulnerability

Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally.

Metrics

CVSS v3.1
7.8
Severity
HIGH
Fixed in
1.60.03293.2680
Affected Products
1

Fix available

1.60.03293.2680
Patch commits
Affected packages
  • Microsoft / Azure Connected Machine Agent
    < 1.60.03293.2680 (from 1.0.0)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
References