Known vulnerabilities in Azure Arc SQL Server Extension

Vendor: Microsoft
Software: Azure Arc SQL Server Extension
Software CPE: cpe:2.3:a:microsoft:azure_arc_sql_server_extension:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Azure Arc SQL Server Extension Azure Arc SQL Server Extension is affected by 1 known vulnerabilities: 1 high Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148266 - Overly Permissive Cross-domain Whitelist
CVE-2026-62895		 CWE-942 High
No
No
 1.1.3518.465 09.09.2026 SB2026090905