High · 7.8 CVE-2026-32168 EUVD-2026-22559GHSA-2vp6-3rx5-75mf

Azure Monitor Agent Elevation of Privilege Vulnerability

Published Apr 14, 2026 · Updated Oct 15, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Azure Monitor

Description

Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Azure Monitor	1.0.0 – < 1.35.9	1.35.9

Advisories 3

WID-SEC-2026-1098 Microsoft Azure: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Apr 14, 2026
NCSC-2026-0117 Kwetsbaarheden verholpen in Microsoft Azure NCSC-NL (Netherlands) · Apr 14, 2026
MSRC-CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability Microsoft Security Response Center · Apr 14, 2026

References

Azure Monitor Agent Elevation of Privilege Vulnerability vendor-advisory patch