CVE-2025-59504: Microsoft Azure Monitor Agent

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.

Affected products

• Microsoft Azure Monitor Agent: before 1.37.1 (fixed in 1.37.1)

Published 2025-11-11. Last modified 2026-06-17.