CVEDB API

Improper access control in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 13.7%

CVSS Severity

CVSS v3 Score 7.8

References

Products affected by CVE-2025-49692

Microsoft » Azure Connected Machine Agent » Version: N/A

cpe:2.3:a:microsoft:azure_connected_machine_agent:-
Microsoft » Azure Connected Machine Agent » Version: 1.34

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.34
Microsoft » Azure Connected Machine Agent » Version: 1.35

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.35
Microsoft » Azure Connected Machine Agent » Version: 1.36

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.36
Microsoft » Azure Connected Machine Agent » Version: 1.37

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.37
Microsoft » Azure Connected Machine Agent » Version: 1.38

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.38
Microsoft » Azure Connected Machine Agent » Version: 1.39

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.39
Microsoft » Azure Connected Machine Agent » Version: 1.40

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.40
Microsoft » Azure Connected Machine Agent » Version: 1.41

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.41
Microsoft » Azure Connected Machine Agent » Version: 1.42

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.42
Microsoft » Azure Connected Machine Agent » Version: 1.43

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.43
Microsoft » Azure Connected Machine Agent » Version: 1.44

cpe:2.3:a:microsoft:azure_connected_machine_agent:1.44