CVE-2025-59285: Microsoft Azure Monitor Agent

High severity, CVSS 7.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Azure Monitor Agent: before 1.36.3 (fixed in 1.36.3)

Published 2025-10-14. Last modified 2026-10-08.