Microsoft Azure Monitor Agent vulnerabilities

14 CVEs affecting Microsoft Azure Monitor Agent, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-47299, published 2026-08-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-32192, published 2026-04-14. High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days. Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
• CVE-2025-47988, published 2025-07-08. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.
• CVE-2026-47299, published 2026-08-11. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
• CVE-2024-35254, published 2024-06-11. High severity, CVSS 7.1. EPSS: 0.8% chance of exploitation in the next 30 days. Azure Monitor Agent Elevation of Privilege Vulnerability
• CVE-2025-59285, published 2025-10-14. High severity, CVSS 7.0. EPSS: 0.8% chance of exploitation in the next 30 days. Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
• CVE-2024-29989, published 2024-04-09. High severity, CVSS 8.4. EPSS: 0.7% chance of exploitation in the next 30 days. Azure Monitor Agent Elevation of Privilege Vulnerability
• CVE-2025-62550, published 2025-12-09. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.
• CVE-2024-38097, published 2024-10-08. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Azure Monitor Agent Elevation of Privilege Vulnerability
• CVE-2026-42830, published 2026-05-12. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
• CVE-2025-59494, published 2025-10-14. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper access control in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Latest

• CVE-2026-32204, published 2026-05-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
• CVE-2026-32168, published 2026-04-14. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
• CVE-2025-59504, published 2025-11-11. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.