Azure Monitor Agent

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-59504 HIGH This Month

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Microsoft Azure Monitor Agent

NVD

CVSS 3.1

7.3

EPSS

0.1%

CVE-2025-47988 HIGH PATCH This Week

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

RCE Microsoft Code Injection Azure Monitor Agent

NVD

CVSS 3.1

7.5

EPSS

0.1%

CVE-2025-59504

EPSS 0% CVSS 7.3

HIGH This Month

Buffer Overflow Heap Overflow Microsoft +1

NVD

CVE-2025-47988

EPSS 0% CVSS 7.5

HIGH PATCH This Week

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to execute code over an adjacent network.

RCE Microsoft Code Injection +1

NVD