Known vulnerabilities in Azure Connected Machine Agent

Vendor: Microsoft
Software: Azure Connected Machine Agent
Software CPE: cpe:2.3:a:microsoft:azure_connected_machine_agent:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Azure Connected Machine Agent Azure Connected Machine Agent is affected by 10 known vulnerabilities: 10 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131285 - Improper Access Control
CVE-2026-40381		 CWE-284 Low
No
No
 1.63 12.05.2026 SB20260512132
#VU121273 - Stack-based buffer overflow
CVE-2026-21224		 CWE-121 Low
No
No
 - 13.01.2026 SB2026011394
#VU117237 - Improper Access Control
CVE-2025-58724		 CWE-284 Low
No
No
 - 15.10.2025 SB2025101594
#VU117226 - Improper Access Control
CVE-2025-47989		 CWE-284 Low
No
No
 - 15.10.2025 SB2025101585
#VU115133 - Improper Access Control
CVE-2025-49692		 CWE-284 Low
No
No
 - 10.09.2025 SB2025091020
#VU115132 - External Control of File Name or Path
CVE-2025-55316		 CWE-73 Low
No
No
 - 10.09.2025 SB2025091019
#VU95861 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-38098		 CWE-59 Low
No
No
 - 13.08.2024 SB2024081393
#VU95860 - Improper Access Control
CVE-2024-38162		 CWE-284 Low
No
No
 - 13.08.2024 SB2024081393
#VU86477 - UNIX Symbolic Link (Symlink) Following
CVE-2024-21329		 CWE-61 Low
No
No
 - 13.02.2024 SB2024021375
#VU84348 - Permissions, Privileges, and Access Controls
CVE-2023-35624		 CWE-264 Low
No
No
 - 12.12.2023 SB20231212107