Microsoft Azure Arc
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Microsoft Azure Arc.
Recent Microsoft Azure Arc Security Advisories
| Advisory | Title | Published |
|---|---|---|
| CVE-2026-65816 | CVE-2026-65816 Azure Arc Elevation of Privilege Vulnerability | August 20, 2026 |
| CVE-2026-69555 | CVE-2026-69555 Azure Arc Elevation of Privilege Vulnerability | August 20, 2026 |
| CVE-2026-24302 | CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability | February 6, 2026 |
| CVE-2025-55316 | CVE-2025-55316 Azure Arc Elevation of Privilege Vulnerability | September 9, 2025 |
| CVE-2025-26627 | CVE-2025-26627 Azure Arc Installer Elevation of Privilege Vulnerability | March 11, 2025 |
| CVE-2024-28917 | Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability | April 9, 2024 |
| CVE-2023-38176 | Azure Arc-Enabled Servers Elevation of Privilege Vulnerability | August 8, 2023 |
| CVE-2022-37968 | Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability | October 11, 2022 |
| CVE-2022-38007 | Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability | September 13, 2022 |
| CVE-2022-35798 | Azure Arc Jumpstart Information Disclosure Vulnerability | July 21, 2022 |
By the Year
In 2026 there have been 2 vulnerabilities in Microsoft Azure Arc with an average score of 9.3 out of ten. Last year, in 2025 Azure Arc had 1 security vulnerability published. That is, 1 more vulnerability have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 2.30.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 9.30 |
| 2025 | 1 | 7.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 1 | 7.80 |
It may take a day or so for new Azure Arc vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Azure Arc Security Vulnerabilities
Aug 2026: Azure Arc Elevation of Privilege Vulnerability
CVE-2026-69555
10 - Critical
- August 20, 2026
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
AuthZ
Feb 2026: Azure Arc Elevation of Privilege Vulnerability
CVE-2026-24302
8.6 - High
- February 05, 2026
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network.
Authorization
Mar 2025: Azure Arc Installer Elevation of Privilege Vulnerability
CVE-2025-26627
7 - High
- March 11, 2025
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
Command Injection
Azure Guest Config / Arc Server Elevation of Privilege via Config Misuse
CVE-2022-38007
7.8 - High
- September 13, 2022
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Azure Arc or by Microsoft? Click the Watch button to subscribe.
