Microsoft Azure Command-Line Interface vulnerabilities

4 CVEs affecting Microsoft Azure Command-Line Interface, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24049, published 2025-03-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-36052, published 2023-11-14. High severity, CVSS 8.6. EPSS: 21.1% chance of exploitation in the next 30 days. Azure CLI REST Command Information Disclosure Vulnerability
• CVE-2022-39327, published 2022-10-25. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting…
• CVE-2024-43591, published 2024-10-08. Critical severity, CVSS 9.1. EPSS: 1.6% chance of exploitation in the next 30 days. Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
• CVE-2025-24049, published 2025-03-11. High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days. Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.